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A system for treating articles, preferably with a sterilizing gas. The system includes a chamber (10) into which the ar- 
ticles are received and valves CV2, VI) for supplying the sterilizing gas to the chamber and for removing the gas from the 
chamber aAer a predetennined time period. The sterilizing gas is generated on site from at least two components, thus min- 
imizing problems in the transportation of the gas to the location. The sterilizing gas generated on site is preferably chlorine 
dioxide and the two components may be chlorine gas and sodium chlorite. The system includes a progammed micropro- 
cessor controller (100) for controlling the valves executing a predetermined sequence of instructions. The predetennined 
sequence of instructions define a state diagram for the system having a plurality of successive states. In order to provide 
for system safety, the controller preferably employs a plurality of abort states to which the system returns in the event of a 
failure. Depending on the nature of the failure, the system automatically moves to the proper abort state: 
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GAS STERILANT SYSTEM 

BACKGROUND OF THE INVENTION 

This application is related to copending applications 
5 Serial Nos. 435,331 filed October 19, 1982 and 601,443, 
filed April 18, 1984, the disclosures of which are 
hereby incorporated herein by reference. 

# 

The present invention relates to systems for delivering 
a gas to a confined chamber and to systems for 

10 sterilizing substances and articles and particularly to 
systems using a sterilizing gas to sterilize articles, 
for example medical apparatus such as utensils and 
instruments which may have been contaminated by foreign 
substances. The system of the present invention can 

15 also be used to sterilize non*medical articles and 
substances, as required. The system of the present 
invention relates particularly to a gas sterilizing 
system wherein two components which react to provide 
sterilizing amounts of a gas are combined in the field 

20 by the apparatus of the present invention. This allows 
the components which react to form the sterilizing gas 
to be shipped separately, which minimizes the 
possibility of accidents. 



25 



In particular f the present invention relates to a system 
using chlorine dioxide as the sterilizing gas. Chlorine 
dioxide gas is both unstable and toxic to humans. For 
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example, chlorine dioxide gas, will, over time, 
decompose into its constituent parts and accordingly, it 
cannot be transported easily. It is therefore 
undesirable to transport chlorine dioxide gas. 
5 Moreover, chlorine dioxide gas is somewhat explosive and 
also has a propensity to undergo catalytic 
decomposition. The components which react to form 
chlorine dioxide gas (e.g., sodium chlorite and chlorine 
gas), however, may be transported relatively easily and 
10 reacted on site to provide the sterilizing gas chlorine 
dioxide. 

Prior systems have typically used ethylene oxide gas as 

a sterilant. For example, the castle 4040 ethylene 

oxide sterilizer manufactured by Sybron Corporation, 

15 Hedical Products Division, is an example of such a prior 

system. Although ethylene oxide has been used as a 

• • • • 

sterilizing gas in the prior systems, chlorine dioxide 

is a preferred sterilant. 

Furthermore, the systems used in the past have typically 
20 been of rather simple design and have not included 

advanced means for maintaining the reliability of the 

devices and safeguarding against accidents. 

Additionally, these systems have not provided a great 

deal of redundancy so that if a component of the system 
25 failed, manual intervention or service personnel was 

required to correct the failure before the sterilizing 

process could continue. 

SUMMARY OF THE INVENTION 

It is an object of the present invention to provide a 
30 sterilizing system which uses a gas having 

bacteriocidal, sporicidal, fungicidal and/or viricidal 
properties to sterilize articles. 

It is a further object of the invention to provide a 
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sterilizing system in which at least two components 
which react to provide a sterilizing gas are reacted on 
site within the apparatus o£ the present invention to 
provide effective amounts of the sterilizing gas. 

5 It is yet a further object of the present invention to 
provide a sterilizing system wherein the sterilant is 
chlorine dioxide gas. 

It is still a further object of the present invention to 
provide a gas sterilizing system having built-in 
10 redundancy and means for maintaining the reliability and 
safety of the system. 

It is still yet another object of the present invention 
to provide a gas sterilizing system which is versatile 
and which is controlled by a programmed. microprocessor . 

15 According to one embodiment of the invention^ these and 
other objects of the present invention are achieved by a 
system for treating articles with a gas comprising first 
means for receiving a first component, second means for 
receiving a second component, the first and second 

20 components, when reacted together, forming the gas, 
means for reacting the two components together for 
forming the gas, valve means for supplying the gas to 
the chamber means to treat the article in the chamber 
means, means for removing the gas from the chamber 

25 means, electronic controller means for controlling the 
means for reacting, means for supplying and means for 
removing, comprising computer means executing a 
predetermined sequence of steps so as to cycle the 
apparatus through a series of successive states defining 

30 a cycle in which the article is treated by the gas and 
wherein the gas is thereafter removed from the chamber 
means so as to render the atmosphere in the chamber 
means within acceptable standards of safety. 
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According to another embodiment of the invention, a 
system for treating articles with a gas is provided 
comprising chamber means for receiving articles to be 
treated, means for supplying the gas to the chamber 
5 means conqsrising valve means coupled to the chamber 
means for supplying the gas to the chamber means, means 
for removing the gas from the chamber means after a 
predetermined time interval, electronic control means 
receiving a plurality of electrical signals associated 
10 with ones of measured parameters from the chamber means 
for controlling the valve means and the means for 
removing, the electronic control means con^rising 
computer means for cycling the apparatus through a 
plurality of states in accordemce with a predetermined 
15 sequence of instructions, the computer means including 
means for aborting the operation of the apparatus to one 
pf a plurality of defined failure states in response to 
a failure of the apparatus, the selected failure state 
dependent on the state in the cycle in which the failure 
20 occurred. 

According to still another embodiment of the invention, 
a system for treating articles with a gas is provided 
comprising chamber means for receiving articles to be 
treated, means for supplying the gas to the chamber 

25 means comprising valve means coupled to the chamber 

means for supplying the gas to the chamber means, means 
for removing the gas from the chamber means after a 
predetermined time interval, electronic control means 
receiving a plurality of elecrical signals associated 

30 with ones of measured parameters from the chamber means 
for controlling the valve means and the means for 
removing, the electronic control means comprising 
computer means for cycling the apparatus through a 
pluality of states in accordance with a predetermined 

35 sequence of instructions, the. con5)uter means including 
memory means, and further comprising means for receiving 
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Input signals from the valve means indicative of the 
closed or open condition of the valve means and means 
for transmitting output signals to the valve means to 
selectively open or close the valve means, image signals 
5 of the input and output signals being stored in the 
memory means, mask means being stored in the memory 
means, the computer means comparing the image signals of 
the input and output signals and generating an alarm 
signal if the input and output image signals do not 
10 agree in response to the setting of a bit in the mask 
means • 

Other objects, features and advantages of the present 
invention will be apparent from the description which 
follows. 

15 BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will be described in greater 
detail with reference to the accompanying drawings in 
which: 

FIG. 1 is a block diagram of the overall gas sterilant 
20 system according to the invention; 

FIG. 2 is a block diagram of the sterilizing chamber and 
the valve and pump block of the gas sterilant system 
according to the present invention; 

FIG. 3 is a block diagram of the electronic control 
25 circuitry of the gas sterilant system; 

FIG. 3A is a table of addresses used in the electronic 
controller of FIG. 3 and the corresponding components or 
signals controlled by the addresses; 



30 



FIG. 4 is a block diagreua showing how various system 
clock frequencies and the system interrupt are derived; 
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FI6. 5 is a front view of one erabodisient of a control 
panel for the gas sterilant system sbowing the 
controller display lights and control switches; 

FIG. 6 is a stats diagram for the gas sterilant system 
5 according to the present invention; 

PIG. 7 is a state output matrix corresponding to the 
state diagram of PIG. 6 for the gas sterilant system 
according to the present invention; 

FIGS. 7A and 7B are flowcharts for the sequencing 
10 program for implementing the state diagram of FIG. 6; 

FIG. 8 is a block diagram of the safety interlock 
arrangement for the gas sterilant system according to 
the present invention; 

PIG. 9 is a functional flow diagram for the software 
15 resident in the memory of the electronic controller of 
the gas sterilant system according to the present 
invention; 

FIG. 10 is a flow diagram for timed functions of the 
software for the gas sterilant system; 

20 FIG. 11 is a flow diagram for one of the timed functions 
of the software for the gas sterilant system; 

FIG. 12 is a memory map of the data memory of the 
electronic control circuitry for the gas sterilant 
system according to the present invention; 

25 FIG. 13 is a flowchart for another of the timed 

functions of the software of the electronic control 
circuitry for the gas sterilant system according to the 
present invention; 
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PIG. 14 is a flowchart of another of the timed functions 
of the software for the gas sterilant system according 
to the present invention; 

FIG. 15 is a flowchart foe another of the timed 
5 functions of the software for the gas sterilant system 
according to the present invention; 

FIG. 16 is a flowchart for a program implemented in the 
control unit for resetting the control unit timed 
functions; 

10 FIG. 17 is a flowchart for a program implemented in the 
control unit for reading in input data from the system 
according to the invention; 

FIG. 18 is a flowchart for a program implemented in the 
control unit for providing a timeout alarm in the event 
15 of a component failure; 

FIG. 19 is a flowchart for a program implemented in the 
control unit for providing an additional alarm in the 
event of a component failure; 

FIG. 20 is a flowchart for a program implemented in the 
20 control unit for writing out data to the controlled 
components of the system; 

PIG. 21 is a flowchart for a program implemented in the 
control unit for reading in analog input data from the. 
controlled system; 

25 FIG. 22 is a general flowchart for a program implemented 
in the control unit for providing the various timed 
functions of the system; 



FIG. 23 is a flowchart for part of the program of FIG. 
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22; and 

FIG. 24 is a flowchart £or a program implemented in the 
control unit for controlling the system outputs* 

DETAILED DESCRIPTION 

5 Oyeraj,; System 

With reference now to the drawing figures r PIG. 1 shows 
the overall gas sterilant system. The system comprises 
a sterilizing chamber 10 r electronic control circuitry 
100 which is preferably microprocessor controlledr valve 

10 and pump block 20 and displays 110. Sensor inputs 5 
including signals generated by appropriate sensors in 
chamber 10 and related to temperature, pressure, 
humidity and sterilizing gas concentration in the 
chamber 10 are fed from the sterilizing chamber 10 to 

L5 control^ circuitry 100. The sensor inputs include both 
analog signals relating to the above measured chamber 
parameters and certain digital signals, e.g., a signal 
indicative of when the temperature in the chamber has 
reached a desired value, to be explained in more detail 

20 below. A START CYCLE switch SI initiates operation of 
the system and an ABORT-RESET switch S2/ as described in 
more detail later, is used to recycle the system states 
to a defined condition if an abort mode is attained, 
i.e., if a failure or alarm condition occurs. The. 

25 operation of valve and pump block ZO will be described 
in more detail below, and includes a source of chlorine 
dioxide gas 22 which is produced on location from 
separated components, water vapor 23 and nitrogen 24. 
The valve and pus^ block is also vented to the 

30 atmosphere, as shown. Valve and pump block 20 includes 
a number of sequenced and controlled valves and a vacuum 
pump for providing the necessary conditions in the 
sterilizing chamber at the appropriate times. Because 
of the instability and potential toxicity of chlorine 

35 dioxide, the preferred sterilizing gas, it is preferable 
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to transport components, which when reacted, form the 
chlorine dioxide gas. For example, the components may 
be sodium chlorite, Na2C102 and chlorine gas, Cl2« 

Appropriate control signals 7 are fed by the electronic 
5 control circuitry 100 to the valve and pump block 20 and 
chamber 10 for controlling components of the system. 
Furthermore, feedback signals 8 from the controlled 
components are fed back to the control circuitry 100 so 
that the controller can monitor the state of the system 
10 and signals 14 are coupled to display panel 110 for 
informing the operator of the status of the system. 

Additionally, a cartridge sense signal 12 is fed from 
the attached gas cartridge (Clj component cartridge) to 
indicate that a gas component cartridge has been coupled 
15 into the system. 
General Functions 

FIG. 2 shows the arrangement of valve and pump block 20 
in more detail. Valve and pump block 20 includes a 
series of valves VI, V2, V3, V4, V4a, V5, V6, V7, V8, V9 

20 and VIO, pumps PI and P2, air filter 13, a detoxifier 22 
for detoxifying the evacuated chlorine dioxide gas, 
which may be Implemented as explained in the above 
copending patent applications, and appropriate sources 
of water vapor, nitrogen r CI2 gas, air, and sodium 

25 chlorite. As shown in FIG. 2, some of the valves are 
merely sequenced, while others are controlled in 
response to selected ones of the values of the measured 
process variables, e.g., gas concentration, humidity 
level and pressure. For safety reasons, each valve (V) 

30 is fitted with two limit switches (LS) to indicate the 
open (e.g. LS2o) or closed condition (e.g. LS2c) of the 
valve. In the attached software listing, the open limit 
switches are referred to by the designation LSOx and the 
closed limit switches by the designation LSCx. Both 
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switches must be in their proper positions at the proper 
times during the entire cycle in order that the cycle 
not be aborted. In addition, a number of -lights are 
provided on a display panel, as shown in FIG. 5, which 
5 indicate the progress of the sterilization cycle or the 
occurrence of possible fault conditions. A cycle can be 
started by the operator, after the chamber door 11 is 
closed, by momentarily depressing the START-CYCLE (SI) 
switch. See PIG. 1. Thereafter the cycle proceeds 
10 automatically according to a program stored in the 

microprocessor memory of the electronic controller 100. 
This process will be described in more detail below. 

Furthermore, in order to provide redundancy, a number of 
manually controlled valves, e.g. valves and V^q, are 

15 provided in case valves and Vg do not open. These 
valves can be manually operated by service personnel so 
that potentially toxic gases can be removed via 
detoxifier 22 in the event valves and Vg fail to open 
when sterilizing gas is in the chamber. An auxiliary 

20 vacuum pump is also provided so that the gas can be 
drawn out via the manually operated valves. 
Sterilization Cycle 

The sterilization cycle is an interlocked sequence of 
events and consequent actions under microprocessor 

25 control. The steps of this sequence are detailed in the 
state diagram of FIG. 6 and state output matrix of FIG. 
7. These steps are performed by a sequencing program, 
the flowchart for which is shown in FIGS. 7A and 7B and 
the details of which are disclosed in the program 

30 listing contained in the appendix. Two types of events 
occur during the sequence, independent and dependent 
events. Some independent events are external events and 
include contact input signals to the controller from the 
controlled valves (e.g., the limit switches), and are 

35 referred to by the symbols XOx to X3x in FIG. 3. Each 
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contact input signal is one bit of an eight bit word and 
the collection of such control input signals shall be 
referred to herein generally as digital inputs (DIN). 
Independent events also include the reception of signals 
5 corresponding to measured or analog process values 
(AIN)/ such as pressure, temperature/ humidity and 
sterilizing gas concentration • The measured value 
signals are associated with logical comparison 
operations performed by the controller. Other 

10 independent events are internally declared, and these 
typically result in the illumination of an indicator 
light on the display panel, shown in PIG. 5. The 
controller evaluates the dependent events, which are 
logical combinations of independent events, to single 

15 TRUE or FALSE results. When the dependent event becomes 
true, a corresponding action is performed, i.e. the 
contrjol system moves to a new .process state, defined by 
the state output matrix of FIG. 7. If the dependent 
event is not true, the controller holds the process 

20 state in its memory and waits for a period of 50 

milliseconds before reevaluating the dependent event. 
In the case of a system failure, the system 
automatically transfers to an appropriate ABORT state 
immediately, as will be described in greater detail 

25 below. This process continues until the cycle has been 
completed or aborted. 
S^^fety qop?iderations 

The sterilization system is provided with a number of checks 
to insure correct operation of the various valves arid other 

30 components. As will be described in more detail below, 

interlock software implemented by the controller main timing 
program confirms the correct position of all valves every 6250 
microseconds. An alarm condition is declared any time a valve 
is not in its commanded state. The operation of these 

35 interlocks differs from typical relay logic, or programmable 
logic controllers, in that interlock checking continues after 
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valve actuation has taken place and can lead to different 
failure programming (ABORT states) at each process stage. The 
correct status of a valve is latched. into memory after 
actuation is confirmed, and this latched condition is checked 
5 every 6250 microseconds. FIG. 8 is a block diagram of the 
safety-interlock components necessary to perform this checking 
routine. Failure to pass either an initial event-timeout 
condition following actuation or any subsequent status check 
will result in abnormal termination of the sterilization 

10 cycle. A sequence of control actions for safe termination of 
the cycle is defined for every point in the sterilization 
cycle, and is initiated immediately in the event of any 
abnormal (ALARM) process condition. This intensive status 
checking according to the invention prevents deliberate 

15 bypassing of the interlock switches in the field, since if a 
limit switch is bypassed, at some point in the system cycle 
the switch will be^ dietermined to be in an improper position, 
thus causing the system to enter an ABORT state. 

As shown in FIG. 8, the safety interlock system includes a 

20 Sequencing Program 120 stored in internal memory (ROM) of the 
electronic controller. Sequencing program 120 is identified 
in a listing of the program resident in memory attached 
hereto, as SEQ and the flowchart for this program is shown in 
FIGS. 7A and 7B. Also stored in memory is a Contact Status 

25 Check program 122 and a series of masks 124 which are 

determined by the particular point in the sequence program. 
The Contact Status Check program is identified in the appendix 
as CSC and a flowchart therefor is shown in FIGS. 18 and 19. 
Inputs 126, which are images stored in memory of actual input 

30 signals from both "open" limit switch contacts 127 (closed 
when a valve is open and open when a valve is closed) and 
"closed" contacts 129 (closed when a valve is closed and open 
when a valve is open) are provided, as well as inputs from 
other components, such as the sterilizing chamber 10 door 11. 

35 A series of contact outputs 125 are also provided by the 
particular state of the sequencing program. The Contact 
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Status Check program 122 compares the contact inputs with the 
contact outputs 125. Whenever an input differs from the 
desired value, as established by the output, an alarm 
condition is declared if, and only if, a corresponding bit is 
5 turned on in the Mask 124. This safety feature detects any 
incorrect valve position immediately. A hardware implemented 
watchdog timer 132 is utilized to provide an extra level of 
safety by disabling all outputs to the valves 130 by opening 
electronic switches 134 when the timer times out if the 
10 microprocessor controller should fail, thereby preventing 
energization of any of the valves in the valve and pump block 
20 in the isvent of a computer failure. 

PIGS. 7A and 7B are a flowchart for the sequencing program 
SEQ. The sequencing program is entered from another program, 

15 called the Main Dispatching Program, which essentially checks 
for flags generated at appropriate time intervals and which 
determines when specific functions should be performed. As ' 
shown in PIG. 7A, when the sequencing program is entered, the 
current state of the system is retrieved from memory, as shown 

20 at 180. The current state is stored in a register 210a in 
internal CPa RAM, as shown in PIG. 12. The organization of 
internal CPU RAM will be discussed in more detail in 
connection with PIG. 12 later. At 182, a check is made to 
determine if the state exceeds the maximum state number. If 

25 it does, an ABORT state, state 31, to be discussed in more 
detail in connection with PIG. 6, is entered at 184. 
Otherwise, the conditions for the next state are performed at 
186 by entering the program ST, the flowchart for which is 
shown in PIG. 73. 

30 As shown in FIG. IB, program ST first evaluates each dependent 
event to a single true or false result, as shown at 188 and 
189. Each dependent event is a logical combination of a 
number of independent events, each of which must be specified 
if the dependent event is true. If the dependent event is not 

35 true, a hold flag (F0) in a memory location in the 
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microprocessor internal RAH (see FIG. 12) is set at 190. 
Otherwise r the next state is set at 192 and a new ABORT state, 
a a new ABORT state is required, is set, but not entered, at 
193. 

5 At 194, the timeout for the previous event must be disabled so 
that the timeout will not cause an alarm condition to be 
generated, which could cause an ABORT state to be reached. 
Timeouts are provided by program implemented timers, which 
monitor for the occurrence of a specif led action, e.g. the 

10 movement of a valve, within a preset time defined by the 

timer. If the specified action has occurred, the timeout must 
be disabled because the timer continues to run. In order to 
disable the timeout, as shown in PIG. 18, a flag in the Timer 
Counter Enable Register (TCEN) 207 in internal RAM (PIG. 12) 

15 is cleared. In this way, when the flag for the timer is set 
- into the Timer Counter flag Register (TCPL) 206 (PIG. 12) when 
the timer runs out, no alarm will be generated. If a timeout 
alarm is generated, a bit TMOP is set in the STATUS register, 
as shown in FIG. 18. 

20. At 195, the masks are cleared, i.e., bits corresponding to the 
particular events which ate to take place are set to a "don't 
care" condition, so that the change of the corresponding bits 
in the contact outputs do not set off an alarm condition by 
the contact status check program. At this point, the action 

25 may be performed, as shown at 196. Subsequently, the timeout 
count for the action is loaded into the appropriate one of the 
timer registers 200 (PIG. 12) as will be explained in more 
detail later. The action timeout flag is then enabled to 
monitor for the timely occurrence of the current monitored 

30 action as shown at 197. The hold flag F0 is then cleared at 
198 and a return is made to the flowchart of PIG. 7A, to the 
point denoted SEQR. 

At 200a, a test is performed to determine if an alarm or 
timeout condition has occurred. If an alarm or timeout has 
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occurred, the current state i3 set to the current ABORT state 
at 201 immediately. Then, the hold flag PJJ is checked at 202 
to determine if it has been set. If it has, a return is then 
made to the background or main dispatching program from which 
5 all subroutines are entered. If flag Pjl has not been set, the 
system remains in the sequencing program to continue to the 
next state and only exits once flag FjS is set. 

PIG. 19 shows the contact status check program in more detail. 
As shown, the contact input status corresponding to the 

10 contact inputs are stored in appropriate locations in the 
internal RAM of the system microprocessor. The memory 
locations are as indicated. See PIG. 12. The same is done 
for the contact output status bits, which specify the events 
to occur for a particular state. The Masks MSK0-MSK3, also 

15 stored in internal RAM, are evaluated by the contact status 
check program. If the contact inputs vary from the contact 
outputs, an alarm condition is generated by setting a bit in 
the status register 204, which is a location in RAM (see PIG. 
12), but this is only done if the corresponding bit in the 

20 Mask is turned on. If the bit is off, indicating that a 

change of the corresponding output is to be allowed to occur, 
no alarm will be generated, and th€> contact outputs will be 
written into an output buffer, to be described in more detail 
below, to actuate the appropriate controlled or sequenced 

25 component, e.g., a valve or p\imp, without operating an alarm. 

Additional safety features are also provided for in the 
system. As discussed above, manually actuable valves V9 and 
VIO, operated by service personnel, and auxiliary pump P2 are 
provided in the event valves V8 and V3 and main pump PI do not 

30 operate properly, thus providing a degree of redundancy. 

Purthermore, as shown in PIG. 2, safety features are provided 
to prevent the possibility of excessive temperatures and 
pressures in the sterilizing chamber 10. A thermally 
activated switch 11a is provided in series with heater HTjJl in 

35 the chaunber to detect excessive temperature. Por example. 
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should the heater HT^l fail to turn off, the thermostatic 
switch 11a will sense an excessive temperature and interrupt 
the circuit. 

Additionally, should excessive pressures develop in the 
5 chamber, a pressure relief valve 9 is provided for venting 
gases in chamber 10 through a second detoxifier 22a to the 
atmosphere. 

Also provided is a check valve 15 in series with valve V4 
which supplies sterilizing chlorine gas to the system. Check 
valve 15 prevents the possibility of nitrogen gas from the 
nitrogen cannister pressurizing the chlorine gas cannister 
should valves V4 and V4a fail to close. Check valve 15 only 
allows chlorine gas to flow out of the chlorine gas cannister 
and prevents nitrogen gas from flowing into the chlorine gas 
cannister if valves V4 and V4a fail to close. 

Operator Interactions 

The apparatus and sterilization cycle of the system according 
to the invention provide for minimal operator intervention and 
maximum safety. FIG. 5 shows an embodiment of a display panel 
20 for the invention showing the various display lights. Certain 
lights are provided but not used, for expansion purposes. The 
sterilization cycle cannot be initiated until the chamber 10 
door 11 has been properly closed. The DOOR-OPEN light (LTI) 
will then be extinguished, as shown by LTOl changing state 
25 from a "1" state in state 1 to a "0" state in state 2 of PIG. 
7, and the READY-POR-CYCLB light (LTll) will be illuminated. 
See also PIG. 5. To start the cycle, the operator merely 
presses the START-CYCLE (SI) switch (see PIG. 1) when ready. 
Thereafter, no operator intervention is required until the 
30 cycle ends, with illumination of the REMOVE-LOAD light (LT17), 
or until an alarm condition has halted the cycle. In the 
latter eventuality, one of the alarm lights indicating the 
failure will be on. The operator notes which lights are on. 
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takes the necessary action and then presses the ABORT-RESET 
(S2) switch when ready to cycle the system back to a defined 
condition and to avoid the failure conditionr if possible. 
For example^ if the PORGE-FAIL light (LT5) is on^ due to the 
5 possibility of an empty nitrogen tank, the tank should be 
replaced before pressing the S2 switch. Similarly for other 
failure modes, an attempt should be made to diagnose and 
remedy the failure condition before pressing switch S2. The 
subsequent actions to abort the cycle are then predetermined 
• 10 and automatic. No further operator intervention is necessary. 
Furthermore r redundancy has been provided in the system so 
that if a component fails, another component r e.g., a pump or 
valve, can take the place of the failed component so that the 
system can be brought out of its failure state. 

15 Control Circuitry Design 

• • • • 

The overall design of the electronic control circuitry 100 is 

shown in PIG. 3. The controller is microprocessor controlled, 

and preferably utilizes a type 8031, 8051 or 8751 

microprocessor CPU 102 manufactured by Intel Corp., because of 

20 the ability of these processors to perform Boolean arithmetic 
on bit addressable data. The CPO 102 includes self contained 
Random Access Memory (RAM) and Read Only Memory (ROM). 
Furthermore r the controller may include external ROM 104 and a 
non-volatile Shadow RAM (SRAM) 106 which may be a type X2210 

25 manufactured by XICOR Inc. and which, as discussed heretofore, 
stores critical data after power-down. The controller also 
includes a clock crystal 108, input latch 113 receiving 
Digital INputs (DIN), an A/D Converter 114 and filter 114a for 
Analog INputs (AIN), an output latch 117 for Digital outputs 

30 (DOU), and a WatchDog Timer 112 (WDT). The latter timer is 
arranged to disable all outputs to the valves to their 
denergized state upon failure of the microprocessor, as 
described above with reference to FIG. 8. Analog to digital 
converter 114 and analog filter 114a , convert the analog 

35 inputs from the measured gas concentration, temperature. 
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humidity and pressure parameters to digital data. 

Central processor 102 is coupled to an address/data bus 116 r 
which also couples RAH 106, RON 104 and a bus tranceiver 105. 
An address latch 103 is enabled by a line 107 from, the 
5 CPU/102, and latches addresses to a further bus 109, the 

Read/Write and Address Bus. Bus 109 allows the DIN Latch 113, 
A/D converter 114, a time stamp clock 119 and DOO latch 117 to 
be addressed at the appropriate times during execution of the 
sterilization sequence program, i.e., when CPU 102 calls for 
10 input data from the various valve limit switches, DIN latch 
113 is addressed. At other times the A/D converter 114 or DOU 
latch 117 will be addressed. 

Two decoders, a read enable decoder 120 and a write enable 
decoder 122 are coupled to bus 109 and allow latches 113 and 
15 117 and A/D converter, 114 to be either read from or written 
to. Appropriate read/write commands are cotipled on lines 126 
for controlling the decoders. 

Furthermore, a data bus 124 is also provided for reading data 
from or to the input and output latches and A/D converter. 

20 Several additional control lines are also employed, including 
a data bus enable 125 and RAM command lines 127. Line 125 
enables bus transceiver 105 only for very short intervals and 
only during input/output (I/O) subroutines (e.g., subroutines 
WCO (Write Contact Outputs), RCI (Read Contact Inputs) and RAI 

25 (Read Analog Inputs), see appendix), when input and output 
operations are being performed, e.gi, writing output 
information to DOO latch 117 for controlling the valves. In 
this way, data on the data bus 124 for actuating the various 
valves of the valve and pua^ block cannot be transmitted to 

30 the valves except under limited circumstances. This provides 
an additional degree of system safety. Furthermore, bus 
transceiver XCVR 105 is bi-directional and the direction of 
data transfer is controlled by one of the read and write 
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lines, as shown. 

RAM coxmnand lines 127 issue signals to shadow RAM 106 so that 
failures can be logged permanently and other critical data can 
be stored in the event o£ a power failure. 

5 A reset line 129 is also provided between the Write enable 
decoder 122 and watchdog timer 112 and an enable line 130 is 
provided between timer 112 and OOU latch 117. As previously 
indicated, timer 112 monitors CPU 102 for proper system 
operation. Normally, CPU 102 constantly resets the watchdog 

10 timer via line 129. In the event of a CPO malfunction, the 
reset signal will fail to appear in time and the timer 112 
times out and removes the output enable signal on line 130. 
The removal of this signal disables all DOU latch 117 outputs, 
thus preventing valve energization in the event of a CPU 

15 failure. Accordingly, a still further degree of safety has 
been provided in the system described; 

Since the elements of the controller are coupled to data buses 
116 and 124, as shown in FIG. 3, they have been assigned 
memory addresses through which they can be accessed by the 

20 microprocessor. FIG. 3A shows one arrangement of these 

addresses, for reference. As indicated above, certain of the 
devices, such as the SRAM 106 and DOU latch 117, are provided 
so that the data they contain can only be changed when bits of 
the microprocessbr port lines are sequenced properly. This is 

25 a safety feature which prevents some microprocessor failure 
modes from causing undesired changes in memory contents or 
valve positions. 

All processor and program timing is derived from the basic 
clock oscillator 108, which preferably has a frequency of 
30 5.9904 MHz. FIG. 4 illustrates the relationship between the 
various frequencies used. As indicated in FIG. 3, provision 
may also be made to add a precision clock 119 to the system, 
which can be read by way of the data/address bus or via a 
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serial data communications line 118 to provide a clock- 
calendar for time-stashing the process data. 

As shown in FIG. 4, basic processor timing is provided by the 
CPU internal crystal controlled clock 108. The clock 108 
5 frequency is divided by twelve by CPU internal counter stages 
130 and 132 to provide the CPO Address Latch Enable (ALE) 
signal of 499,200 HZ. The ALE signal is used to strobe 
address latch 103 so that addresses can be placed on bus 109 
and further controls the operation of A/D converter 114. 

10 Signal ALE is also coupled to further internal divider stages 
134 and 136. Divider stage 134 provides a signal designated 
TIHER 1, which is further divided by an internal counter stage 
138 into a 1200 bit/sec signal for serial data transfer, which 
optionally may be provided to transmit system data to remote 

15 locations via serial line 118. 

Counter stage 136 provides an interrupt/ TIMERO. TIMERO 
provides a transition every 6250 usees and allows the main 
timed function program, TMRO, to read all contact inputs and 
analog inputs and write all contact outputs every 6250 usees. 
20 The operation of this program and other programs of the 
operating system will be described in more detail later. 

The TIMERO interrupt is then further divided by program TMRO 
software counter stages 142, 144 and 146, to provide the 
respective program execution signals designated as TIC, SEC 
25 and NIN, which occur at period of 50 msecs, 1 sec and 1 min, 
respectively. These will be discussed in further detail . 
below. 

FIG. 3A details the assignment of addresses on address bus 
109. As shown, the bus 109 is a 16 bit bus. Internal CPU RAH 
30 is assigned address space OQ-FF and bits AO to A7 on the bus 
109 identify the RAM locations. Internal ROM is identified 
by bits Ap to Aj^g, with bits Aj^2"*15 ^^^^^^ being 0*s, as 
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shown. Addresses from 0000 to OPPF are used. The other 
components, external ROM 104, external RAM 106, clock 119, A/D 
converter 114, DIN latch 113, DOO latch 117 and watchdog timer 
112 are assigned the addresses indicated in FIG. 3A. As 
5 shown, the DIN and DOO latches each are capable of latching 4 
eight bit words, the DIN latches from the various limit 
switches and other contact inputs and the DOO latches to the 
various valves, pumps, etc. Digital inputs DIN and digital 
outputs DOO are each subdivided into four words of 8 bits 
10 each, and all eight bits of each group are accessed at one 
time by the respective addresses indicated in FI6. 3A. 

As shown in PIG. 3, the analog pressure, temperature, humidity 
and chlorine dioxide gas concentration parameters are fed from 
respective sensors 114c to respective amplifiers 114d, e, f 

15 and g. In order to provide an additional degree of system 
safety when sterilizing chlorine dioxide gas is being 
evacuated from the sterilizing chamber, it is important that 
the chlorine dioxide gas concentration levels be accurately 
measured. Accordingly, amplifier 114g for the gas 

20 concentration signal is switched into a high gain mode by a 
control signal Y37 during the time when the sterilizing 
chamber is being evacuated. In this way, A/D converter 114 
will compare the input concentration analog signal with a 
greater number of quantizing levels, thus providing a more 

25 accurate indication of the actual concentration. At all other 
times, amplifier 114g will remain in a low gain mode. For 
example, when chlorine dioxide levels are being measured in 
the chamber for purposes of determining an adequate 
sterilizing concentration, much higher concentration levels 

30 are being measured, and accordingly, A/D converter 114 
provides an accurate digital signal corresponding to the 
analog concentration level. Therefore, amplifier 114g can 
remain in a low gain mode. Amplifier 114g may be switched to a 
high gain mode by signal Y37 changing from a "0" to a "1". 

35 The system data-base may be thought of as being divided into 
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external and internal sections. The external data-base 
contains the Contact inputs (CCI), which are cosqprised of the 
digital inputs DIN; the Contact Outputs (CCO), which comprise 
the digital outputs DOU; and the Analog Il^uts (AIN). Images 
5 of the external data-^base are maintained in an internal data 
base comprising locations in internal RAH by subroutines of 
the TIHERO program (THRO), which is invoked every 6250 
microseconds. That is, every 6250 microseconds, all contact 
inputs and analog measurements are read and stored in the 

10 controller internal data-base and images of the contact 

outputs loaded in the DOU latch. With reference to FIG. 12, 
which is a memory map for the internal data RAH of CPa 102, 
images of the contact inputs are stored as the variables CCIO 
through CCI3, and the filtered analog inputs are stored as the 

15 variables ADIO through ADI7. The contact outputs are stored 
as variables CC0O-CCO3. Programs using the input data 
retrieve it only frogi these locations, and not from the input 
devices directly. Hence, the programs only operate on images 
of the inputs and outputs. In addition, the internal data- 

20 base includes a number of register banks, RBj3r-RB3« In RB^, a 
number of timers 205 are provided including a 50 msec timer 
TICK (50 msec), a second timer TSEC (1 sec) and a minute timer 
THIN (1 min). These timers provide timed function intervals 
for scheduling functions implemented at those intervals by the 

25 system main dispatching program. The TICK timer times out 
after 50 msecs and sets a flag TICF in STATUS register 204 to 
be used by the main dispatching program to initiate all 50 
msec timed functions, including a number of timers 200 in 
register bank RB3 which are invoked every 50 msecs, TTHx. 

30 These timers are preferably invoked for monitoring timeout 
conditions for the system valves, for example. 

The TSEC timer similarly times out after 1 sec and sets a flag 
(SECF) in STATUS register 204, to be used by the main 
dispatching program to initiate all 1 second timed functions, 
35 including a number of timers 200 in RB3 which are invoked 

every second, STHx. Similarly, the THIN timer times oiit after 
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a minute and sets a flag (MINP) in STATUS register 204 to be 
used by the main dispatching program to initiate the 1 minute 
timed functions, including a number of timers 200 in RB3 which 
are invoked every minute, HTMx. The data memory also includes 
5 registers in RB2 for keeping track of the current state and 
ABORT state used by the sequence program. Also included are 
the sequence status register 204, TCEN and TCFL registers 207 
and 208, already discussed, for the timers, and a control 
register CTRL for enabling a control calculation to open or 

10 close a valve. 4 bits of the control register, as shown, are 
used for controlling the four control loops of the system, 
corresponding to the measured temperature, humidity, pressure 
and gas concentration parameters. An array of bit masks 260 
is provided in. the internal data-base to permit "don't care" 

15 conditions when comparing contact input and output status. 
Further descriptions- of the data elements are found in the 
controller program source listing in the appendix to this 
specification. 

More particularly, internal RAM of CPU 102 may be organized as 

20 follows. The 256 (FF) memory locations are organized into 50 
msec, one sec and one minute timers in the timed function 
registers (memory locations 00 to 07); optional communications 
program registers (memory locations 08 to OF) for controlling 
a receive buffer RBUF and transmit buffer TBUF; main 

25 dispatching program registers (memory locations 10 to 17); 
timers 200 which are implemented at 50 msec, one second and 
one minute intervals by timers 205 (18 to 10); (counters IE 
and IF); a status byte 204 (20); a control byte 206 (21); a 
timer enable byte TCEN (22); a timer flag byte TCFL (23); a 

30 series of masks 260 for the inputs; (24-27); the contact 
output images CC00-CC03 (28-23); contact input images CCIO 
CCI3 (2C-2F); analog inputs ADI0-ADI7 (30-37); and set points 
for the measured process variables, such as temperature, 
pressure, concentration and humidity (38-33). The remainder 

35 of the internal RAM is assigned to the communications buffers 
(40 to 5F), the system stack (60 to 7F) and internal 
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microprocessor registers and storage {S0 to FF), the use o£ 
which is known to those skilled in the art. Refer to 
Microcontroller User's Manual, published by Intel Corp., May 
1982 f document No. 210359-001. Although the entire system 
5 program is contained ia internal ROM of the CPU 102, an 
external ROM may also he provided so as to allow additional 
programming capabilities. Alongside FIG. 12, the contents of 
the STATUS, CTRL, TCEN and TCFL registers by bit are shown. 

State Semienee 

10 The progress of the sterilization cycle can be determined from 
the PROGRESS lights on the display panel, shown in FIG. 5. 
During a normal cycle the failure lights should never be on. 
Whether normal or aborted, botli cycle and failure data will be 
maintained in a non-volatile random access memory or shadow 

15 RAH (SRAM). For exanqple, after a designated number of cycles, 
e.g. three cycles, i:he gas cartridges will be discharged and 
must be replaced. The data concerning the number of cycles in 
which a cartridge has been used is stored in this memory. 
Also, after a predetermined number of cycles, or repeated 

20 failures, the system will be disabled until maintenance has 
been performed. This is a safety feature Vfiich cannot be 
bypassed in the field, and this data is also stored i» the 
non-volatile memory. 

AS discussed, FIG. 6 is a statei diagram which defines the 
25 operation of the sequencing program of the sterilant system. 
PIG, 7 identifies the condition of the components identified 
in FIG. 2 as well as the display lamps shown in FIG. 5 for the 
various process states. The operation of the system may now 
be described in further detail. 

30 The system always begins in an initialization state, state 0. 
During this state, all output lines of the microprocessor in 
control circuitry 100 are set so as to initially deenergize 
all valves in the valve and pun^ block 20. After a short time 
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delay f valve V7 is opened to allow air into the chamber, as 
shown by a ••I" appearing opposite W07 for state 0 in PIG. 7. 
Furthermore, during this state, the control circuitry 100 
stores in memory the state of all output ports of the 
5 microprocessor. 

In states 0 and 1, the door to the sterilizing chamber 10 is 
in its open position. Once the door is closed, state 2 is 
entered* As indicated in FIG. 6, this means that the system 
is ready to begin its cycle. As further indicated in FIG. 7, 

10 in state 2, valves V1-V6 are closed, valve V7 remains open 
and valve V8 is closed. Display lights LT1-LT6 are off, light 
LTll (READY FOR CYCLE) is on and lights LT12-LT17 are off. 
The corresponding limit switches (LS) are in a position 
determined by the condition of the associated valve, e.g., for 

15 valve V2, which is closed, limit switch LS2o is open while 
limit switch LS2c is made. As indicated above, two limit 
switches are provided oh each valve, one for the open position 
and one for the closed position, in or^er to insure the safety 
of the system. Both limit switches must be in their proper 

20 position, otherwise a failure will occur. 

When the door to the chamber 10 is open, the system is in 
state 1, once the initialization state has been passed. 
Accordingly, only LTl is on and the other lights are off, as 
shown in FIG. 7. 

25 Assuming the chamber door has been closed and the system is in 
state 2, if the START CYCLE switch SI is pressed, the system 
moves to state 3. At this point valve V7 closes, as indicated 
by the "0" appearing in the column for state 3 in FIG. 6 and 
light LT12, CYCLE IN PROGRESS, turns on. As indicated in FIG. 

30 2, valve V7 vents the chamber 10 via a filter 13 to the 

atmosphere when open. Thus, the flow of filtered external air 
into the chamber is stopped when valve V7 closes. 

If the door is opened in state 2, an immediate return to state 
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1 is made. 

Once In state 3, and, if 77 ia closed, as indicated by the 
closed state of limit switch LS7c and open state of liinit 
switch LS70, state 4 will be entered. If valve V7 does not 
5 close within a certain timer as determined by a timeout 

implemented by one of the TIC timers TTMx in RB3 of the data 
memory, state 29, ABORT-1 will be entered. Furthermore, if an 
alarm condition occurs, such as the opening of a valve which 
should be closed, an alarm condition will be generated and the 
10 point of failure indicated on the display panel, indicating to 
the operator that a malfunction has occurred. 

Once in state 3, if the chamber door is opened, the cycle will 
be aborted, as shown in FIG. 6. 

Assuming V7 has closed and stat^ 4 has been entered, the 
15 chamber heater HT01 is turned on, as indicated by the "1" in 
the column for state 4 opposite BT01. If the temperature 
within the chamber increases to a sufficient level within a 
time-out period, state 5 can be entered. If not, ABORT-1, 
state 29, is entered and a return to state 2 is thereafter 
20 made when switch S2 is depressed. A safe operating 

temperature is reached when temperature switch Tl (PIG. 2) is 
actuated by the temperature of the atmosphere in the chamber 
reaching the desired temperature. After this occurs, the 
temperature in the chamber is controlled by turning the heater 
25 on and off as required during the cycle, as indicated by the 
notation "C" in the columns of PIG. 7 opposite "HT^l". 

Once state 5 is entered, valve VI is opened, in preparation 
for starting vacuum punqp PI so that the atmospheric contents 
of chamber 10 can be evacuated. Again, if valve VI does not 
30 open within a timeout period, ABORT-1, state 29 is entered. 

State 6 is entered when vacuum valve VI opens within the 
timeout interval. At this point, the vacuum pump PI is 
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started and light LT13 indicates that evacuation is in 
process. A timer is started which determines the length of 
time that the pump remains on. 

Once in state 6, the chamber door 11 can no longer be opened r 
5 because, at this point in the cycle, the chamber is under a 
vacuum. 

In state 6, the pressure in the chamber is checked to 
determine if it has been reduced sufficiently so that it is 
less than or equal to a nominal value, defined as PEVAC. If 
10 the pressure is less than PEVAC, then state 7 is entered and 
valve VI is closed. 

Should the pressure within the chamber be greater than PEVAC 
after the evacuation time has passed, indicating a less than 
adequate "vacuum level, state 29 is entered. Similarly, if 
15 valve VI does not close within a specified time, state 29 is 
entered from state 7. 

After the valve VI has been closed in state 7, a leak-hold 
test is commenced in state 8. If the pressure after a leak- 
hold time is less than a nominal value PLEAK, state 9 is 
20 entered. If not, abort state 29 is entered. 

In state 9, water vapor is allowed to enter the chamber, i.e., 
valve V6 is placed in a controlled open state, as indicated by 
"C" in FIG. 6, and a determination is made whether the 
humidity has reached a specified level in a certain time. 

25 Should a nominal humidity HNOM not be reached within the 
specified time, state 30, ABORT-2, will be entered. Since 
evacuation has been completed, light LT13 is turned off and 
light LT14, which indicates a FILL IN PROGRESS, is turned on. 
By FILL is meant the supply of non-sterilizing gases into the 

30 chamber, e.g., steam and nitrogen gas. At this point, the 
system enters a new point in the staJbe diagram wherein 
malfunctions allow the system to return to a different abort 
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stater state 30. The state of the various valves and displays 
for ABORT-2 (state 30) is indicated in FIG. 7. 

In state 9, the humidity timer times out. If the humidity 
level is greater than a nominal value HNON, state 10 is 
5 entered. Otherwise r state 30 is entered and the cycle is 
aborted. 

In state 10, a humidity hold test is performed wherein the 
humidity level is monitored for a predetermined time period. 
If the humidity level is not maintained for the predetermined 
10 time, state 30 is entered. Otherwise, state 11 is entered. 
Valves 72 and V8 are opened and valve V5, along with valve V6, 
is then controlled on. 

Valve V5 allows nitrogen to enter the system. At this point, 
even though valve 72 is open, chlorine dioxide cannot enter 
15 the chamber because valves 74 and 74A, which are controlled 
together, are closed. 

In state 11, valve 72 is checked to determine that it has 
opened. If it has not opened withihg a specified time, state 
30 is entered. If valve 72 has opened in time, state 12 is 

20 entered, and valves 74 and 74A are controlled on, allowing 
chlorine dioxide to enter the chamber. A timer is started 
during which time the chlorine dioxide gas concentration 
levels in the chamber are measured. As explained previously, 
chlorine dioxide may be generated by the reaction of two 

25 components, Clg gas and sodium chlorite, NajClO^, on site. 
Chlorine gas is contained in a canister which can be coupled 
to the system via a connecting port, as known in the art. A 
container of sodium chlorite is coupled into the system 
between valve 72 and valve 74, as shown in FIG. 2. In state 

30 12, LT14 is turned off and LT15, STERILIZATION IN PROGRESS, is 
turned on. 

Once the gas concentration measured in state 12 has reached a 
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concentration greater than or equal to a nominal concentration 
CNOH within a preset time period, state 13 is entered. An 
acceptable sterilizing gas concentration might be, e.g., 1.0 
mg/L to about 300 mg/L. Otherwise a new abort state, AB0RT*3, 
5 state 31, is entered. This new abort state is necessary 
because new conditions are now present in the sterilization 
chamber, since sterilizing chlorine dioxide gas is now present 
in the chamber. This requires a different set of procedures 
to be followed in the event of a failure, and accordingly, a 
10 new abort state is provided. 

In state 13, a gas-hold test is commenced. If the gas 
concentration is greater than or equal to CNOM for a 
predetermined time period GTMRr state 14 is entered. 
Otherwise, state 31 is entered and the cycle is aborted. 

15 In state 14, the temperature in the chamber is ^measured. I£ 
it is greater than a minimum temperature TMIN but not higher 
than a maximum temperature THAX, state 15 is entered and a 
sterilization timer is started. If the temperature is not 
adecpzate, state 31 is entered and an abort occurs. A typical 

20 operating temperature is approximately 30 ^C. 

During state 15, sterilization is in progress. Valve V6, for 
humidity control, is still controlled open, and valves V4 and 
V4A are also controlled open. Should an alarm condition 
occur, e.g., if any condition changes r i.e., a valve does not 
25 remain in its proper state, state 31 is entered. State 16 is 
entered only after a sterilization time STMR has elapsed, 
which typically might be several hours. 

In state 16 , valves V4f V4A and V6 are closed (if they do not 
close in the required timeout period, state 31 is entered), 
30 valve V3 is in a controlled state and valve V8 is still open. 
In state 17, light LT15 is turned off and light LT16 is turned 
on. Light LT15 is turned off when the sterilization timer has 
timed out and valves V4, V4A have closed. Light LT16 
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indicates that a purge is in progress. During state 17 r the 
gases in the chamber are ronoved via valves V3 and V8 and 
.detoxifier 22, labelled DUMP 22 in PIG. 2, which converts the 
chlorine dioxide into a harmless substance. The 
5 detoxification may be accomplished as explained in the above 
copending patent application S.H. 601,443, by passing the 
evacuated chlorine dioxide gas through a reducing agent, e.g., 
sodium thiosulfate. The detoxified gases are removed via 
valve V8 by vacuxim pun^ PI. Should valves V3 and V8 fail to 
10 open within a timeout period, ABORT-3, state 31, is entered. 
During state 17, an evacuation timer is started which controls 
the amount of time during which chamber 10 is evacuated. 
State 18 is entered only if both valves V3 and V8 have opened 
in a predetermined time interval. ^ 

15 in state 18, once the evacuation timer has timed out past a 
time ETMRir state 19 is entered and valves V3 and V8 are 
closed. State 20 is entered when valves 73 and V8 close. 

As shown in PIG. 6, should an alarm condition occur or should 
valves V3 or V8 fail to close within a specific time, state 31 
20 is entered. 

In state 20, valve V5 is in a controlled state. This allows 
nitrogen gas to enter the system as required and also prepares 
the system for the removal of any remaining sterilizing gases 
behind valve V2 via detoxifier 22 once valve y3 is reopened in 
25 state 22. In state 20, the pressure is checked. If it is 
greater than a maximum pressure PMAX, valve V5 is closed in 
state 21, turning off the nitrogen supply. If the pressure is 
less than PMAX, a new abort state, ABORT-4, state 32, is 
entered. 

30 In state 21, valve V5 is checked to determine that it has 
closed within a prescribed timeout period. If it has not, 
state 32 is entered and the cycle is aborted. In state 22, 
the remaining sterilizing gases in the system are detoxified 
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via detoxifier 22 and reopened valves V3 and V8 and the gases 
removed. Once valves V3 and V8 have opened £or a sufficient 
period of time, state 23 is entered but only if valves V3 and 
VS have opened. In state 23, another timer, denoted the 
5 DESORB timer, is activated. This allows sterilizing gases 
which have been absorbed into the materials in the chamber to 
be removed or desorbed over a time period DTMR. 

Should valves V3 and V8 fail to open, ABORT-5, state 33, is 
entered. In this circumstance, the operator will be 

10 instructed to manually activate valves V9 and/or VIO so that 
sterilizing gas can be removed from the system. The manually 
operable nature of valves V9 and VIO is indicated in FIG. 2 by 
a T above the valve symbols. If valves V9 and VIO are 
manually opened, state 33, ABORT-5 will automatically be 

15 entered. 

If state 23 is successfully reached and 'the DESORB timer times 
out after a time DTMR, state 24 will be entered. - At this 
point, valves V2, V3 and V8 are closed and a check is made to 
determine that these valves are closed. Then, state 25 is 

20 entered, during which a low-gas-hold test is performed. If 
the gas concentration is less than or equal to an acceptable 
value CMIN within a time period GHTM, state 26 is entered. An 
acceptable level of safety might be, for example, less than .5 
ppm of chlorine dioxide. Otherwise, a dtimmy state 35 is 

25 entered, before a return is made to state 20 by operation of 
switch S2. This provides a delay time in which to open 
valves • 

In state 25, the gain of amplifier 14g (See PIC3. 3) is changed 
so that the amplifier is placed in a high gain mode during the 
30 measurement of chlorine dioxide gas concentration levels 

during evacuation. This is indicated by the "1" in state 25 
opposite 6C1 (gain change control). This provides more 
accurate measurement of concentration levels during 
evacuation, providing an extra degree of system safety, as 
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discussed previously* Also, in state 25, a counter CNT (see 
RB3 of PIG. 12) is decremented » This counter forces the 
system to cycle through states 25, 20, 21, 22, 23 and 24 via 
state 35 for a specified number of times determined by the 
5 initial count in the counter CNT0. Accordingly, state 35 will 
be entered whenever the concentration level CMIN has not been 
reached within time GHTM or if the counter CNT has not reached 
0. State 26 will be entered from state 25 when both the 
concentration is less than CHIN and CNT0 is 0. This is 

10 provided to insure system safety in the event the 

concentration sensor in the sterilizing chamber should fail. 
By going through a number of cycles via state 35, the gas 
concentration will be decreased, thus insuring that, even if 
the concentration sensor indicates the gas concentration 

15 levels are below CMIN, the system will automatically cycle 
through a number. of times necessary to reduce the 
concentration to acceptable safety levels. This is important, 
because if the concentration sensor failed and this additional 
safety feature was not provided, the system might indicate 

20 that the gas concentration level was within acceptable levels 
of safety although it actually might not be. 

In state 26, a counter is checked which is incremented each 
time the system cycles at least to step 26* If, e.g., the 
count is less than 3, a jump is made to state 28. If greater 
25 than or equal to 3, state 27 is entered. In state 28, valve 
V5 is controlled on, and the count is then incremented. This 
allows nitrogen gas to enter the chamber. 

If the cycle count is greater than or equal to 3, then state 
27 is entered directly. In state 27, valves V2, 73, V4 and V8 

30 are opened, and all remaining gas is dumped from the system 
and the Clj gas in the cartridge is also dumped. Once 
sufficient time has elapsed, i.e., the Dump Hold time DHTH has 
elapsed, state 28 is entered. From state 28, the system 
enters state 37, during which the pressure in the chamber is 

35 monitored until it is within 5% of atmospheric pressure. At 
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this point light LT17f REMOVE LOAD, is turned on. At this 
point, state 38 is entered, light LTll is turned on and 
actuation of switch S2 enables a return to state 1. The 
operator will be notified to replace the gas cartridge if the 
5 system has gone through state 27. 

As indicated in FIGS. 6 and 7, after ABORT states 29 and 30 
are entered, a return is made to state 2 after switch S2 is 
depressed and state 2 conditions are set. 

In ABORT state 31 a return is made to state 20 and state 20 
10 conditions are set once switch S2 is depressed. In ABORT 

state 32, return is made to state 19, and state 19 conditions 
are set. In ABORT states 33, 34, and 36, return is made to 
states 23, 25 and 37, respectively. If state 38 is reached, 
the operator receives an indication that the cycle is complete 
15 and light LT17 is turned on. To allow the chambex: door to be 
opened, switch S2 is actuated, and state 1 is entered. If any 
ABORT state is reached, the appropriate failure light is 
illuminated. When a return is made to states 20, 23, or 26 
from an ABORT state, the system then proceeds to cycle through 
20 the states which normally follow in the sequence. 

Genqy^t], gQfi;w^i;e Funpt^jjon^ 

The sequencing program has already been described. Generally, 
software for the sterilization system controller is interrupt 
driven. Until an interrupt occurs a background task is always 
25 running via the main dispatching program. Upon interrupt, 
from any of several possible event sources, software control 
is passed to the appropriate interrupt handling program. This 
is illustrated in FIG. 9. 

In FIG. 9, the main dispatching program 300 is shown. This 
30 program can also be found under this heading in the program 
listing attached hereto. Essentially, this program monitors 
for the occurrence of a timer flag indicating 50 msec, 1 sec 
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or 1 minute functions must be performed. These flags are 
stored in the status register (STAT) 204 of PIG. 12. When a 
flag occurs, the program 300 jumps to the appropriate timer 
program 318, 300 or 322. The timer programs are performed on 
5 a priority basis such that one minute functions are performed 
first and 50 msec (T50) functions last. 

There are four sources of interrupting events: power-up, 
timer, communications, and power-down. Power-up, power-down 
and communications are external hardware interrupts, while the 

10 timer interrupt, TMRO, is an internal hardware interrupt under 
program control. Except for power-up, each interrupt handling 
program saves the running processor context in the CPD stack 
before starting its task function, and the context is restored 
before resumption of the interrupted program. The timer 

15 interrupt handler (TMRO) sequences all other non-inter rupt 
programming functions. As discussed, it accomplishes this by 
passing one or mbre flags (MINF 312, SECF 314, TICF 316), 
signifying which of the timed tasks is to run, through the 
STATUS register 204 of PIG. 12. The main dispatching program. 

20 300 tests the flags and will cause the selected functions to 
be executed as shown by 318-322. This method permits further 
interrupt action while lower priority functions are being 
completed. Some of the functions performed at one minute, one 
second and 50 msec (TIC) intervals are as indicated in PIG. 9 

25 at 318, 320 and 322, respectively. The descriptions to follow 
will explain the tasks to be performed under each category of 
interrupt event in greater detail. 

Main Dispatching Program 

Essentially, the main dispatching program looks for timer 
30 flags and when one is found, calls the. appropriate subroutine. 
See FIG. 9. The main dispatching program may be found in the 
attached program listing. 
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Powgr Up 

Upon power-up as shown at 310, the processor stack, register 
bank, and other functions must be initialized. This interrupt 
function does not require saving of the processor context.. 
5 Instead, previous process information will be read from the 
electrically reprogrammable memory SRAM 106, the clock 119 is 
reset and the process will resume from whichever state has 
been prescribed. The watchdog timer will be reset, and 
control will then pass back to the main dispatching program 
10 300. 

The power-up routine is found in the program listing under the 
program title INIT. 

Power Fail 

A power fail program is preferably implemented. One 
15 embodiment for this program, as shown in FIG. 9, stores 

critical memory contents at 312 into the SRAH 106, where the 
data will be preserved until power is restored. The power- 
fail interrupt may be designed to occur whenever the 5 volt 
logic line drops below 4.55 volts, and recovery to 4.75 volts 
20 may be utilized for power-up. The power fail program can be 
found in the attached program listing. 

Comm^nic^ti9n3 

A communications feature (COM) may optionally be provided in 
the system according to the invention. The communications 

25 program is activated every time a character is removed from a 
serial output buffer or enters a serial input buffer. The 
function of this program is to feed characters to the transmit 
buffer as they are sent and to remove characters from the 
receive buffer as they are received. Two FIFO queues may be 

30 provided to hold the input and output data streams. The 

communications program tests the input and output data streams 
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for the presence of termination or control characters. Flags 
are set in the event of termination characters. Programs, 
well known in the art, may be provided for processing control 
characters for typical serial interface devices connected to 
5 the control circuitry. For example, it may be desirable to 
transmit information for recording purposes over telephone 
lines to a printer or display device. Other programs, known 
in the art, can be employed to handle the standard modem 
control functions, e.g., RS232C commands. Hardware I/O lines 
10 may be provided for the necessary modem control signals. The 
communications program saves and restores the processor 
context. 

Timed F^nct;io?l9 

Timed functions in the controller occur on four levels as 
15 follows; functions triggered by the TIHSRO timer (every. 6250 
microseconds)', functions initiated every 50 milliseconds 
(TICS), functions started every second, and functions which 
run every minute. Data is exchanged between these levels 
through defined data areas in the microprocessor data-base, as 
20 indicated more clearly in PIG. 10. The TMRO program also 
accesses the input and output devices connected to the 
controller. The control function (CTR), which is activated 
every second, transmits valve commands to the upper four bits 
of the CTHL register when enabled by the lower four bits of 
25 the CTRL register on a bit by bit basis, as shown in PIG. 24. 

As shown in PIG. 4, timer interrupts (TMRO) occur at intervals 
of 6250 microseconds (6.25 milliseconds). At each interrupt, 
the TMRO program is entered, and all timed functions are 
scheduled. As the basic cycle time of the processor is 
30 approximately two microseconds, 3120 instruction cycles will 
elapse before the next such interrupt. Some of this time is 
used at each timer interrupt to perform data gathering and 
interlock functions, e.g. the analog inputs and data inputs 
are read and stored in CPU internal HAM. This is indicated at 
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330 in PIG, 9. Immediately following a timer interrupt the 
processor context will be saved in the appropriate registers. 
The interrupting timer, TIHERO, will then be reset and 
restarted. Program functions which are to occur at intervals 
5 of 50 msec, 1 sec, and 1 min. will be scheduled as shown at 
332, by passing flags, as discussed, whenever the respective 
time interval has elapsed. Data inputs, status checks, and 
outputs are performed next. Finally, the previous program 
context is restored, and an interrupt return is executed. If 
10 any timed events are to occur, they will be performed in 

sequence by the main dispatching program. Otherwise the main 
disptaching program will be resumed. 



The basic timer program, which is executed for each timer, is 
shown in the flowchart of FIG. 22. As shown, the timer is 

15 first decremented and a check. is made to determine if the 
jbimer has timed out,.i.^e., reached a count *of 0. If so, -the 
corresponding timer flag is set in TCPL register 208 shown in 
FIG, 12. If not, the corresponding flag is cleared. Then the 
program is executed for the next timer, and once all timers 

20 have been completed, a return is then made to the main 
dispatching program. 

The decrement timer function is shown in FIG. 23. As shown, 
when a timer is decremented, a flag is set in the TCFL 
register if the time has timed out, and the current count is 
25 then stored in the appropriate timer register 200. 

1. TIMERO Timer fTMRQ^ 

The lowest level timed function, occurring every 6250 
microseconds, is initiated by the interrupt TIMERO. This is 
indicated in the uppermost portion of FIG. 10, which is a 
30 flowchart for the various timed functions. After saving the 
processor context, the first function of the TMRO interrupt 
program is to reset and restart the timer as indicated at 400. 
This is performed by a subroutine RRT. In FIG. 10, the 
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cocresponding program for implementing the desired function is 
indicated above the flowchart symbol, and can be found in the 
listing in the appendix. The TMRO program is a time-critical 
function. Once the timer has been restarted, all of the 
5 contact inputs to the controller are read into their 

corresponding memory images, CCIO - CCI3 as shown at 410 and 
412. These images reside in a portion of the microcomputer 
memory which is bit addressable. This greatly facilitates 
logical processing. The subroutine for in^lementing this 

10 function is shown in FIG. 17 and is also shown in the attached 
program listing as subroutine RCI. The contact output 
information is also located in this memory, at GCOO - CC03 and 
is indicated in PIG. 10 at 425. The interrupt program next 
performs a masked comparison of the contact input and output 

15 status bits, using bit masks 415 also stored in this memory 
area. This is shown at 420. If any bits do not match their 
corresponding desi-red outputs, when masked for "don't care" 
conditions, an alarm condition is set by setting a bit *in the 
STATUS register 204 (PIG. 12), as shown at 430. 

20 Timeout alarms are also implemented by the TMRO program. A 
subroutine CSC2, as shown in PIG. 18 and the attached program 
listing, shows how timeouts are determined. When a timer 
times out, e.g., a timer for determining whether a valve has 
closed or opened in time, a flag will be set in the timer flag 

25 register TCPL. If the setting of the flag requires an abort 
upon failure, e.g., if the failure of a valve to close in time 
is to cause an abort condition, then a flag must be set in the 
timer enable register TCEN. This informs the timeout alarm 
program that an alarm condition should be set, which will 

30 cause the alarm condition to be loaded into the STATUS 

register. This will cause transfer to an ABORT state by the 
sequencing program. 

Next the current contact output status is loaded from its 
memory image into the output contact latch by program WCO, as 
35 shown at 435. Finally, as shown at 440 and 445, the current 
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analog input data 445 is read (RAX), exponentially filtered 
(FILTER) f and stored in the correct memory locations outside 
the bit addressable space. See FIG* 21. Eight timer 
interrupts take 50 milliseconds. Thus, a vell-£iltered analog 
5 input scan o£ all eight analog inputs (only four need be used 
for the four control loops corresponding to gas concentration, 
pressure, temperature and humidity) will be available each 
time the 50-millisecond program is entered. Therefore, every 
50 msecs, the RAX program obtains 64 input samples, 8 for each 
10 channel, the eight samples for each channel then being 

averaged to obtain a single analog value for each channel. A 
return is then made to the main dispatching program. The 
TIMERO program is summarized in the flowchart of FIG. 11. 

2. T^q nmer (T50) 

* • 15 The TIC functions are those which are performed every 50 

milliseconds, and include the performance of the sequencing 
(SEQ) program. The first function performed is that of 
resetting the watchdog timer as shown at 500, because if this 
timer is not reset in time, all valve outputs will be disabled 

20 as described with reference to FIG. 8. Next, all tick timers 
(TTH) are decremented at 510, their counts stored at 512, and 
their corresponding status flags set or cleared at 520 in 
register TCFL 208 of FIG. 12. The setting of the timeout 
flags in the TCFL register 208 (See FIG. 12) also requires 

25 that the status of a corresponding bit be determined in the 
Timer Counter Enable Register (TCEN) 207 by the sequencing 
program, as shown. In this way, if the corresponding TCEN bit 
is not set, this informs the controller not to enter an ABORT 
state when the timer flag comes on. For example, when the 

30 sterilization timer times out (approximately after 4 hours), 
an ABORT state should not be entered. For valve time-outs 
however, it is desired to abort if the timer times out and the 
valve has not opened or closed in time, and accordingly, the 
corresponding TCEN bit will be set by the sequencing program, 

35 thus allowing an alarm to be generated. If the valve closes 
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in time, its corresponding TCEN bit will be disabled^ and no 
alarm will be generated. Once the TICK timers have been 
decremented, the main sequencing logic 515 (SEQ), which 
controls the progression from one state to the next described 
5 hereinabove, is performed until it cannot progress further, 
due to a hold for a specified status condition not yet 
present. Then, the outputs are loaded into the contact output 
image in memory (CCO) at 530, e.g., the output data for the 
appropriate valves or heater to be controlled are stored in 
10 memory. Then, the TMRO program subroutine WCO will write the 
output images to the controlled devices on its next pass. The 
TIC function program is summarized in the flowchart of PIG. 
13. 

3. Second Timer fTlSl 

15 Every second all one-second timers are decremented at step 
550, the count stored at 552, and their corresponding status 
bits set or cleared (555). This includes the setting of flag 
bits (TCPL) and appropriate Timer Counter Enable bits (TCEN) 
depending on whether an ABORT is to occur at the occurrence of 

20 the timer flag. Finally, the control program 559 (CTR), 
accepting setpoints (557) from the sequencing program 515, 
loads the new output status for the controlled devices into 
. the COKTROL register for subsequent loading into the contact 
output registers of internal RAM. During the next pass 

25 through the TMRO program, these outputs are fed to the 

controlled devices. As shown in pig. 8, the timed functions 
occur in the order MIH, SEC and TICK. A flowchart for the one 
second program, TIS, is shown in pig. 14. 

As shown in pig. 14, the first function for the one second 
30 timer program includes the clearing of the one second flag 
(SECP) in the STATUS register (see PIG. 12) . All one second 
timers are then decremented, as shown in PIG. 23 and at 600 in 
PIG. 14. Program TIS then obtains the loop status from the 
sequencing program at 602, and determines if the corresponding 
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control bit in the CONTROL register 206 for the particular 
loop has been enabled at 604. Each loop corresponds to one o£ 
the four measured analog process variables, pressure, 
texoperaturef humidity and gas concentration. This is also 
5 shown in FI6. 24. As indicated, the lower £our bits o£ the 
CONTROL register 206 correspond to the status of the four 
loops. If the loop is enabled, a value is determined by 
subtracting a measured input value, e.g., gas concentration or 
pressure, from a stored set point value from the sequencing 
10 program, as shown at 606. If this value is greater than 0, a 
corresponding one of the four upper bits in the CTRL register 
is set at 607. If the CTRL register bit is 0, then the 
corresponding CONTROL register bit is cleared, as shown at 
608. 

15 At 610, the program gets the next loop and repeats steps A-X 
for that loop. Then the next two loops are obtained and s.teps 
A-X repeated sequentially for those two loops. When all four 
loops have been performed, a return is made to the main 
dispatching program. 

20 The interrelationship between the analog input data, set 
points, control register, control program (CTR), output 
loading program (CTL) and contact outputs CCO are shown in 
FIG. 24. As shown, program CTR retrieves analog input data 
ADI, setpoints SP and the control register (CTRL) status from 

25 memory. The new status for the control register is then 
determined in accordance with the flowchart of PIGS. 14 and 
the new status loaded into the CTRL register. Program CTL 
then loads the appropriate outputs for controlling the valves 
and heater into the appropriate contact output register in 

30 memory. During the TMRO program these outputs are then 
coupled to the controlled devices by the program WCO. See 
FIGS. 10 and 20. 

4. Minute Timer (TIM) 
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At one-minute intervals, an optional batch time clock 119 may 
be updated as shown at 610. This clock may be used to 
initiate the display of process conditions by an appropriate 
printing or display device. All one-minute timers are 
5 decremented at 620, and their corresponding status bits are 
set or cleared at 630. The TIM program is summarized in the 
flowchart of PIG. 15. 

A sample listing of the software for the gas sterilant system ' 
according to the invention is appended below. 
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STIILECPEOGRAH FOR SCI STERILIZATION CONTEOUEt) 



**•«?««••••»• 



nCRAN 

chusx 

BNXO 
BNXl 
BNK2 
fiNK3 
STATE 
ABORT 
SSTA 
SABO 
SCNT 
SHAZ 
VDLT 
ROLY 
TVAC 
LKHT 
PVAC 
PRLK 
EUHT 

HNOR 

RUHR 

TLOU 

THAZ 

CMCT 

CNon 

CONR 

TSTR 

TEVC 

FN2T 

OSRB 

TL6R 

CNTM 

CITIN 

PATH 

PHAZ 

TOMP 

PSPl 

TSFl 

RSPl 

C5P1 



EOU 
EOU 
EOU 
SOU 
EOU 
EOU 



£0U 


R« 


EQU 


R7 


£yu 


0 


sgu 


2 


£011 


4 




38 




' 8 


ff All 


2 


Phil 


30 


EOU 

M If W 




EOU 


242 


EOU 


223 


EOU 


30 


EOU 


207 


EOU 


90 


EOU 


0 


EOU 


255 


EOU 


15 


EOU 


64 


EOU 


100 


EOU 


200 


EOU 


30 


EOU 


15 


EOU 


30 


EOU 


15 


EOU 


5 


EOU 


25 


EOU 


12 


EOU 


28 


EOU 


15 


EOU 


60 


EOU 


60 


EOU 


60 


EOU 


60 



•••••••••••••I 

07B 
07R 
OOR 
06R 
lOH 
18R 



;RAX A/D qRAN MUHBER 

(A/0 CRANNEL HASX 

{BBO 

:RB1 

;RB2 ' 

;RB3 

;CURREIIT STATE 
• ; ABORT STATE 

'fj?2 ^'fPSET FOR STATE 
:SRAn OFFSET FOR ABORT 
;SRAn OFFSET FOR COUNT 
;I1AX. VALID STATE 
{VALVE DELAY (400 MSEC.! 

DELAY (2 «IN? * 
;EVAC TIME (30 BIN) 
;LEAX ROLD TIHE (5 BIN) 
;EVAC PRESSURE (95% FS) 
; PRESS. LEAX LIB. (80% FS^ 
;HUBI0IF. TIME (30 BIN,) 
JNOR. HUB. LEVEL (81% FS) 
;RUB. ROLD TIBE (90 BIN ) 
JHIN. STERIL. TEBP.(SrFS) 
*SiJA STERIL. TEBP.(100%) 
'SJNC. TIBE (15 BIN.) ^ 
J NOB. STERIL. CONC. 

•2if.??" ^^^^ 
^fJ?!^*- <200 BIN) 

"ps. TIBE (15 BIN) 

•?Jf,°!f* ™^ HIM) 
;LOU GAS HOLD TIBE (15) 

.-BIN. NO. OF PURGE CYCLES 

••MIN. CONCENTRATION (10%) 

;ATB PRESS. (5% FS) 

jBAX OPER. PRESS. (H% FSl 

.-DUMP HOLD TIBE (15 BIN) 

{PRESSURE SETPOINT 

jTEBPERATURE SETPOINT 

;HUBIOITY SETPOINT 

{CONCENTRATION SETPOINT 
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;* 

sun 
t 

;* 

INO 

INI 

IN2 

IN3 

IN4 

INS 

IN6 

IN7 

• 

f 
CLX 



ZO 
XI 
Z2 
Z3 

• 
9 

SUl 

m 

9 

t* 
YO 
Yl 
Y2 
Y3 



UOT 



BZTERNAL SRAOOtf lAH 
ZOATA 2000H 



*•*•••***•••* 



••••«••••••»»«» 



ANALOG 

ZDATA 

ZOATA 

ZOATA 

ZOATA 

ZOATA 

ZOATA 

ZOATA 

ZOATA 



INPUTS 
6000B 
6001R 
tf002H 
6003H 
60Q4H 
6005H 
6006U 
4007B 



CLOCK POST 
ZOATA 4000R 

CONTACT INPUTS 
ZOATA J)COOOB 
ZOATA OCOOIB 
ZOATA 0C002B 
ZDATA 0C003B 



SUITCBES 
ZOATA 



OCOOIB 



CONTACT OUTPUTS 
ZOATA OEOOOB 
ZDATA OEOOIB 
ZDATA OE002B 
ZOATA 0E003B 

WATCHDOG TIMER 
ZOATA OEOOIB 



ISBAOOD RAH AOORBSS 



;CBAN-0 
:CBAN-1 
$CBAN-2 
;CHAN-3 
;CRAN-4 
;CHAN-5 
(CBAN-4 
;CBAN-7 



AOORESS (PRESS.) 
ADDRESS (TEHP.) 
AOORESS (BUn.) 
AOORESS CCONC.) 
AOORESS 
ADDRESS 
AOORESS 
AOORESS 



: CLOCK AOORESS 



;CCI-0 ADDRESS 

:CCI-t AOORESS 

;CCI-2 AOORESS 

lCCI-3 AOORESS 



:SUITCB AOORESS 



;CCO-0 AOORESS 

»CC0-1 ADDRESS 

:CC0-2 ADDRESS 

;CC0-3 ADDRESS 



.•WATCHDOG RESET. ADDRESS 
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ll OATA-BASB ALLOCATIOHs"**""""*"""—*"*"""" 



TICK 
TS£C 
THIN 

KPUT 
KTAX 
TPUT 
TTAIf 

Tino 

STtlO 
STJIl 

nmo 
Rini 

CNTO 
CNTl 



STAI 
CTRL 
TCEN 
TCPL 
nSKO 

nsKi 

11S1C2 
flSX3 

ccoo 

CCOl 
CC02 
CC03 
CCIO 

ecu 

CCI2 
CCX3 



AOIO 

ADIl 

A0I2 

A0I3 

ADIl 

AOIS 

ADI6 

ADI7 



0SE6 

0K6 

OS 

DS 

OS 

0Jt6 

DS 

OS 

OS 

OS 

ORG 

OS 

OS 

OSG 

OS 

OS 

etc 

OS 

OS 

ORG 

OS 

05 

BSE6 

ORG 

DATA 

DATA 

DATA 

DATA 

DATA 

DATA 

DATA 

DATA 

ORG 

DATA 

DATA 

DATA 

DATA 

DATA 

DATA 

DATA 

DATA 

DSEC 

ORG 

OS 

OS 

OS 

05 

OS 

DS 

05 

OS 



05B 
1 
1 
1 

OCB 

1 

1 

1 

1 

18B 

1 

1 

2AB 

1 

1 

ICB 

1 

1 

1£B 

1 

1 

2oa 

20H 

21B ' 

22B 

23H 

24B 

2SB 

2tfB 

27B 

288 
28B 
29B 
2AB 
2BH 
2CB 

OB 

SB 

FB 

OB 



STIHE COUBTERS 
:TZCX COUHT 
JSEC. COUNT 
JMIN. COUNT • 
JSIO BUFFER POINTERS 
;JCV PUT POINTER 
JBCV TAKE POINTER 
tm PUT POINTER 
;J«T TAKE POINTER 
.•TIC. THIERS 
JTTIBER-O 

STTINER-I 

; SECOND TIRERS 

;STinER-0 

.-STINER-I 

JHINUTE TIHERS 

;HTIflER-0 

snTIRER-l 

.•COUNTERS * 

;COUNTR-0 
• sCOUNTRT-t 

.•INTERNAL BIT SPACE 
;STATUS BYTE 
J CONTROL BTTB 
•i;"f«/COUNTER ENABLES 
; TIMER/COUNTER FUGS 
; OUTPUT HASK REGISTER 
; OUTPUT HASK REGISTER 
SOUTPUT BASK REGISTER 
JOUTPUT nASK REGISTER 
.•IHAGBD I/O BITS 
: OUTPUT PORT 1 
>• OUTPUT PORT 1 
: OUTPUT PORT 2 
; OUTPUT PORT 3 
; INPUT PORT 0 
.•INPUT PORT 1 
J INPUT PORT 2 
{INPUT PORT 3 

;ANALOG DATA IHAGB 

.♦PRESS. INPUT 

;TEMP. IMPUT 

J BUN. INPUT 
:CONC. INPUT 
:CaANNEL 4 INPUT 
;CBANNEL S INPUT 
JCBANNBL tf INPUT 
tCBANNEL 7 INPUT 
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5TP0 
STPl 
STP2 
STP3 

Tins 



0K6 

OS 

OS 

OS 

OS 

OKG 

OS 



38B 



DATA AREA 

*IS'* SETPOIHI , 
flUM. SBTPOIin 
;COHC. SETPOINT 
SBAICH TlflB CLOCK 
;BAICB TIHB 
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DATA OEFIMITZOJfS 

* 



•••••• 



[STATUS A CONTROL J 



* **• 



TICF 
SECF 
niNF 
RCVF 
XHTF 
THOF 
ALHF 



CENO 

C£N1 

CEM2 

CEN3 

CTXO 

CTRl 

CTft2 

CTK3 

• 

TENO 
TENl 
TEN2 
TEN3 
TENl 
TENS 
TEN6 
TEN7 



TFLO 
TFLl 
TFL2 
TFL3 
TFLl 
TFL5 
TFL6 
TFL7 



BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 

CTXL 
BIT 
BIT 
. BIT 
BIT 
B(T 
BIT 
BIT 
BIT 
TCEN 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 

TCFL 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 



STAT.O 
STAT.l 
STAT. 3 
STAT.l 
STAT. 5 
STAT.6 
STAT. 7 



CTXL.O 
CTIL.l 
CTRL. 2 
CTRL. 3 
CTRL. 4 
CTRL.S 
CTRL.6 
CTRL. 7 

TCEN.O 
TCBN.l 
TCEN. 2 
TCEN. 3 
TCEN. I 
TCEN. 5 
TCEN. 6 
TCEN. 7 



TCFL.O 
TCFL.l 
TCFL. 2 
TCFL. 3 
TCFL.l 
TCFL. 5 
TCFL. 6 
TCFL. 7 



;TICX FLAG 
; SECOND FLAG 
;niNUTE FUG 
;BCV FLAG 
.-XHT FLAG 
;TI1IE0UT FLAG 
sALARJt FLAG 



;FRESS. LOOP ENABLE 
;TEHP. LOOP ENABLE 
;HUfl. LOOP ENABLE 
JCONC. LOOP ENABLE 
; PRESS. LOOP OUTPUT 
;TEnp. LOOP OUTPUT 
:BUII. LOOP OUTPUT 
;CONC. LOOP OUTPUT 



;TTO 
;TT1 
:5T0 
;ST1 
;MTO 
.'HTl 

snT2 

;nT3 



ENABLE 
ENABLE 
ENABLE 
ENABLE 
ENABLE 
ENABLE 
ENABLE 
ENABLE 



jTTO 
;TT1 
:STO 
;ST1 
slITO 
{ItTl 
:CTO 
;CT1 



TIJJEOUT 

TIHEOUT 

TIMEOUT 

TIHEOUT 

TINEOUT 

TIHEOUT 

UNOERFLOU 

UNOERFLOU 
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"""mrMmm^- • ••••• •••••••• 



;• 
;* 



LTOl 
LT02 

i.ro3 

I.T04 
LT05 
LT06 
'LT07 
•LT08 

'■; 

LTll 
LT12 
LT13 
LT14 
LT15 
LTli 
• LT17 
LT18 

9 

i 

wai 
wo 2 

W03 
W04 

wos 
wo* 

wo 7 
W08 



.PPOl 
HTOl 
SPRl 
SPK2 
SPX3 
SPR4 
AOZC 
L6G1 



I OUTPUT POMS] 



-1 



BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 

OPOST 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 



OPOST 2 

BIT ~ 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

OPORT 3 

BIT ~ 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 



CCOO.O 
CCOO.l 
CC00.2 
CC00.3 
CC00.4 
CCOO.S 
CC00.6 
CC00.7 



CCOl.O 
CCOl.l 
CC01.2 
CC01.3 
CCOl . 4 
CC0I.5 
CCOl. 6 
CCOl. 7 



CC02.0 
CCOl.l 
CC02.2 
CC02.3 
CC02.4 
CC02.5 
CC02.6 
CC02.7 



CC03 . 0 
CC03.1 
CC03.2 
CC03.3 
CC03.4 
CC03.5 
CC03.6 
CC03.7 



;000R-0PEN 
;EVAC-FAIL 
; FILL-FAIL 
jSTERIL-FAIL 
? PURGE-FAIL 

;L0A0-UNSTERILE 
; SPARE 

;TEST-FAIL 



;READY-FOR-CYCLB 
; CYCLE-IN- PROGRESS 
: EVAC- IN-PR0GRES5 
I FILL-IN-PROGRESS 
; STER I L-IN- PROGRESS . 
; PURGE- IN-PR06RESS 
(REnOVS-LOAO 
;SPARB 



5 OPEN-BAIN- VAC- VALVE 
S OPBN-HAIN-CAS-VALVE 
; OPEN-MA IN-OUnP-VALVB 
? OPEN-GAS-CTRL-VALVE 
; QPEN-N2-CTRL- VALVE 
; OPEN-STEAlt-CTRL-VALVB 
: OPEN- BREAK- VALVE 
; OPEN-OUHP-VAC- VALVE 

;TURN-Pl-ON 

:TURN-H1-0H 

.•SPARS 

; SPARE 

: SPARE 

* SPARS 

;A/D ZERO CALIB. 

SCONC. HIGH GAIN SUITCH 
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•«**«*• 

?• 
»• 

; 

LSCl 
L5C2 
LSC3 
LSC4 
LSC5 
LSCtf 
I.SC7 
LSC8 



•••• 

(INPUT PORTS J * 



LSOl 
L502 
LS03 
LS04 
LS05 
LSD 6 
LSD 7 
LS08 



DSCl 
TSCl 
5UC1 
5UC2 
SIOl 
SI02 
SI03 
SI04 



SI05 
SIO< 
SI07 
SI08 
SI09 
SIIO 
Sill 
5112 
i 



XPORT 0 

BIT " CCIO.O jVl-CLOSBO 

BIT CCIO.l JV2-CL0SED 

BIT CCI0.2 ;V3-CL0SED 

BIT CCI0.3 ;V4-CL0SB0 

BIT CCI0.4 ;V5-CL0SE0 

BIT CCI0.5 ;V6-CL0SB0 

BIT CCI0.4 ;V7-CL0SE0 

BIT CCI0.7 ;V8-CL0SE0 



I PORT 1 

BIT " 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

I PORT 2 

BIT ~ 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

BIT 

I PORT 3 
BIT ~ 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 



CCIl.O 
CCIl.l 
ceil. 2 
ecu. 3 

ceil. 4 
ceil. 5 
ceil. 6 
ecu. 7 



CCI2.0 

eci2.i 
eci2.2 

Cei2.3 

cei2.4 

CCI2.5 
CCI2.6 
CCI2.7 



eei3.o 

CCI3.1 
CC13.2 
Cei3.3 
CCI3.4 
CCI3.S 
CCI3.4 
CCI3.7 



; VI -OPEN 
;V2-0PEN 
;V3-0PEN 
;V4-0PEN 
;V5-0PEN 
;V6-0PEN 
;V7-0PEN 
SV8-0PEN 



; DOOR-SU- 
;TEMP-SU- 
:nAN-SUl- 
;nAN-SU2- 
; SPARE 
; SPARE 
; SPARE 
; SPARS 



: SPARE 
: SPARE 
; SPARE 
{SPARE 
i SPARE 
: SPARE 
; SPARE 
: SPARS 



CLOSED 
-CLOSED 
CLOSED 
CLOSED 
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* BASK BIT OEFINITIOHS 



HVCl 

nvcz 
uvea 

1IVC4 

HVC5 

live* 

HVC7 

Hvca 



nvoi 

1IV02 
HV03 
JIV04 

nvo5 
nvo6 

HV07 

nvo8 



RX5X-RE6-0 

BIT HSKO.O sVl-CLOSEO-RASK 

BIT HSKO.l ;V2-CL0SBD-IIASK 

BIT nSKO.2 ;V3-CL0SED-1IASK 

BIT 11SK0.3 ;V4-CL0SED-IIASK 

BIT I1SK0.4 ;V5-CL0SED-BASK 

BIT KSX0.5 tV<>CLOSEO-llASK 

BIT 1ISX0.« ;V7-CL0SE0-QASX 

BIT 1ISX0.7 ;V8-CL05E0-IUISX 



noci 

MTCl 

nsci 
nsc2 



HASX-SEG-l 



BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 
BIT 



nsKi.o 
asxi.i 

115X1.2 
115X1.3 
II5X1.4 

nsxi.5 

115X1.6 
115X1.7 



nA5X-RE6-2 
BIT 115X2.0 
BIT 115X2.1 
BIT 1ISX2.2 
BIT 1ISX2.3 



Vl-OPBM- 
V2-0PEN' 
V3-0PEN- 
V4-0PEN- 
V5-0PEN- 
V6-0PBN- 
V7-0PEN- 
V8-0PEN- 



HA5X 
lUkSX 
-llASX 
HASX 
11A5X 
nA5X 
HASX 
1IA5X 



;DS-CLOSEO-HASX 
;T5-CL05E0-nA5K 
sSUl-CLOSEO-nASK 
;SU2-CL0SE0-1!A5X 
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5 t..tt..t«. 

»• IMTBJIEUPT VBCTOIS . - - . 

J* 



; RESET VECTOR 
tTXlIEXO VECTOR 
;PUR PAIL VECTOR 
{TXRERl VECTOR 
; SERIAL DATA VECTOR 



CSE6 




ORG 


OOOOB 


LJHP 


XNIT 


ORG 


OOOBH 


LJHP 


THRO 


ORG 


001 3B 


. LJHP 


PURE 


ORG 


OOIBH 


RETX 




ORG 


0023B 


LJHP 


SIOHND 



; POUER FAIL HANDLER 



PURFs CLR PI. 6 

SETB PI. 6 

RETI 



:STORE SKAIl DATA 
: DISABLE STORE 
} INTERRUPT RETURN 
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TIIKO 





'* ojr*-";,";- 

I SAVE PROC. STATUS 
;SAVE ACCUMULATOR 
SSAVS OP(L) 
;SAVB OPCH) 
;US6 SBO 

S DISABLE lOTBRRUPTS 

•fffF KESXART TIMERS 
;«BAO CONTACT INPUTS 
; CONTACT STATUS CHECK 
SURITB CONTACT OUTPUTS 
;«BAI> ANALOG INPUTS 
jiESTORE INTERRUPTS 
•.RESTORE DP(E) 
;SESTORS OPCL) 
S RESTORE ACCUMULATOR 
{RESTORE PROC. STATUS 
; RETURN PROM TIMERO INT. 



TRTNj 



ORG 

PUSH 

PUSH 

FU5B 

PU5B 

MOV 

CLR 

ACALL 

ACALL 

ACALL 

ACALL 

ACALL 

SETS 

POP 

POP 

POP 

POP 

RSTI 



0030a 
PSU 
ACC 
OPL 
OPH 

FSU.IBNXO 
EA 

BRT 

RCI 

CSC 

UCO 

RAI 

EA 

OPH 

OPL 

ACC 

PSU 
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TlUtO 5UB80UTINE5 

................ 



CLOCK: 



CLXli 

CLX2: 

CLK3: 
CLX4: 



CLE 

nov 

ADD 
ROV 

nov 

AOOC 

nov 

SSTB 
OJNZ 

nov 

SETB 

OJNZ 

HOV 

SETB 

OJNZ 

ROV 

SETB 

SJRP 

CLB 

SJRP 

CLJt 

SJRP 

CLB 

NOP 

BET 



TSO 

A,»L0U(O1204-7) 

A.TLO 

TLO.A 

A,«HIGB(-3120<f7> 

A.THO 

TBO.A 

TXO 

T1CK.CLK3 

TICK.ta 

TICF 

TSEC,CLK2 

TSEC,|20 

SECF 

TRIN.CIII 

TRIN,«60 

RINF 

CLX4 

RINF 

CLX4 

SECF - 

CLX4 

TICF 



:ST0P TIREXO 
I LOAD COUNT(L) 
! CORRECT FOR OVERRUN 
;RELOAO COUNTBR(L) 
IRBPBAI Fcyl COUNT(a) 
;CET CORRECTED HIGH BYTE 
•LOAD COUNTER(B) 
RESTART TIRBB 
IF 50-RSEC 

RELOAD TICK COUNT 
SET 50-nSEC FLAG 
IF 1-SBC 

RELOAD TSEC COUNT 
SET 1-SEC FLAG 
IF 1-RIN 

RELOAD TRIN COUNT 
SET 1-RIN FLAG 
END 

ELSE. CLR HIN. FLAG 
END 

ELSE. CLR SEC. FLAG 
END 

ELSE. CLR TIC. FLAG 
END 

; RETURN FROR TIRER PROG. 
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RCI: 
CZl: 



CSC( 



C5C2j 



CSC4: 
C5C5: 



UCO: 
COl: 



MOV 
HOV 

nov 

CL£ 

SETB 

nov 

IMC 
INC 
OJNZ 
SET 

CLS 
ItOV 
ZSL 
ASTL 

nov 

MOV 

C?L 

ZKL 

ANL 

OKL 

JZ 

SETB 

MOP 

MOV 

AML 

JZ 

SETB 

SJH? 

CLE 

MOP 

EET 

MOV 

MOV 

HOV 

HOV 

CPL 

CLS 

HOVE 

SETB 

IMC 

IMC 

OJHZ 

SET 



Dm,#EO 
KO.tCCIO 
S4.i4 

P1.4 

A, •OPTS 

PI. 4 

«BO.A 

OPTS 

SO 

S4.CI1 



ALnp 

A,CC02 
A. ceil 

A^nsxi 

S2.A 

A.CC02 

A 

A.CCIO 

A.nsxo 

A.S2 
C5C2 
AUfF 

A.TCFt 

A.TCEM 

CSC4 

THOP 

CSC5 

Tnop 



WTS,#yo 
to»fccoo 

S4.«4 
A.fSO 
A 

PI. 4 
«OPTS,A 
PI. 4 

OPTS 
BO 

S4.C01 



"MTACT IMPUTS 

POS S4««4 OOUMTO 0 00 
ENABLE I/O . *^ 
CBT INPUT 
DISABLE I/O 
t STORE II III DATA-BASE 
S POINT KEXT input 
J J2J^ ST0SA6E 
ISETUSM 

SCLEAS AUSn PUG 

;6BT VALVE OUTPUTS 

S COMPARE UITH LSO IMPure 

JMASK OFP VO OON'T SJ2 

;SAVE PARTIAL RESULT 

;GBr VALVE OUTPufl 

J MAKE CLOSED NORHAL 

.•COMPARE yiTH LSC INPUTS 

JMASK OFF VC OON' T 2S2 

JADD PSEV. SESULT 

» ' IP MISMATCa 

« SET A LAW! PLAO 

i END 

.•GET TIMEOUTS 

.•TEST IP ENABLED 

.•IP (TMO.AND.TEN) 

;ELSB^ CLEAS TIMEOUT PUO 
{RETURN 

POINT CONTACT OUTPUTS 

FOR E4:s4 DOONTO 0 00 
GET OUTPUT DATA 
INVERT IT FOR OUTPUT 
ENABLE I/O """"T 
LOAD OUTPUT LATCH 
DISABLE I/O 
POINT NEXT OUTPUT 

{SETURM 
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RAI: 
XAl: 



nov 


OPTS. • I SO 


nov 


SO.tAOIO 


nov 


Sl.iS 


CLK 


PI. 4 


BOVZ 


A,9DPTR 


SETB 


Pl.il 


ACALL 


FILTER 


nov 


w ^ *• J n 


ZNC 




INC 


RO 


OJNZ 




SET 




nov 


B.«020R 


nuL 


AB 


PUSH 


B 


PUSH 


ACC 


nov 


B.tOEOH 


nov 


A. 0X0 


nuL 


AB 


nov 


S2.B 


POP 


' B 


ADD 


A.B 


ZCH 


A,S2 


POP 


. B 


AODC 


A.B 


tET 



; POINT FIRST ANALOG CHAN. 

.•POINT FISST ANALOG DATA 

;FOS S|lt»8 DOUNTO 0 00 

; ENABLE I/O 

; GET ANALOG DATA 

; DISABLE I/O 

; FILTER ANALOG DATA 

t LOAD IT INTO DATA BASE 

t POINT HfiT CHANNEL 

; POINT NEXT DATA 

I END 

;BETURN 

;LOAO FILT. CONST, CB * 

;B.A:«0.125*R(I) 

{SAVE PROD(H) 

{SAVE PROD(L) 

{LOAD (1-CB) CONST. 

{GET X(I-l)- 

{B,A:»0.875*X(Z-1) 

{SAVE HIGH BYTE 

{LOAD FKOD(L) 

{ADD LOU BYTES 

{GET HIGH BYTE 

{LOAD PROD(H) 

{A.R2 IS FILTERED DATA 

{RETURN 
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:*** 



TSO: 



SCHEDULED TIRE FUHCTXOIIS 



I 

TlX: 



Tilt: 



CL& 


TICF 


sCLEAR IICX FLAG 


ROV 


PSU.iBNX2 


;USE RB2 


ACALL 


RUT 


{RESET UATCHDOG TIBER 


ACALL 


DTT 


:DECREnENf TICK TIHERS 


ACALL 


SED 


;PERF0R1I SEQUENCE LOGIC 


ACALL 


CTL 


SLOAD CONTROL OUTPUTS 


EET 




; RETURN TO DISPATCHING. 


CLR 


5ECF 


:CL£AR 1-SEC FLAG 


• HOV 


FSU.iBNX2 


. sUSE RB2 


ACALL 


D5T 


:DECREnENT SECOND TINERS 


ACALL 


CTR 


;PEKF0R11 CONTROL ACTIONS 


RET 




CLK 


HINF 


{CLEAR 1-RIM FLAG 


HOV 


PSU»«BMX2 


;USE RB2 


ACALL 


UBC 


; UPDATE BATCH CLOCX 


ACALL 


OHT 


;DECREnENT RIHUTE TIRSRS 


RET 
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RUT: 



UBCt 



MOV 

CLK 

CLK 

IIOVX 

5ETB 

lEX 

MOV 

CLR 

XCH 

INC 

XCH 

INC 

XCH 

ADOC 

XCH 

SET 



DPM,#UDT 
A 

PI. 4 
•DPTK.A 
PI. 4 



KO.fTIHE 
C 

A,«KO 
A 

A.9R0 
£0 

A, •SO 

A,«0 

A.9K0 



;POINT UATCHDOG TIMBH 
J CLEAR ACCUMUUTOR 
: ENABLE I/O 
J RESET UATCHDOG IIHEt 
I DISABLE I/O 

IPOINT TImIcL) 
; CLEAR CARET 
.•GET TIMS(L) 
; INCREMENT IT 
; UPDATE TIHE(L) 
; POINT TIMECH) 
SORT TIME(H) 
; PROPAGATE CARRT 
J UPDATE TIHE(H) 
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• tk 



*•*«•**•• 



CT4 

CTS 



CT8t 
CT9: 



C»* HOV 
ROV 
CIS 
ROV 
SUBB 
JNC 
SETS 
SJHP 

CT3t MOP 
INC 
XHC 
CU 
HOV 
SUBB 
JNC 
CLX 
SJHP 
SETB 
NOP 
ZNC 
INC 
CLK 
HOV 
SUBB 
JNC 
CLX 
SJHP 
SETB 
NOP 
ZNC 
INC 
CIS 
ROV 
SUBB 
JNC 
CLX 
SJHP 
SETB 
NOP 
XET 



CT6: 
CT7.. 



KO,#STPO 
Kl.tAOIO 
C 

A.gXO 
A.9X1 

CT2 
CTXO 
CT3 
CTXO 

SO 
SI 

c 

A.tXO 

CT4 

CTXl 

CTS 

CTXl 

XO 
Kl 
C 

A»«X1 

CT6 

CTX2 

CT7 

CTX2 

XO 
SI 

c 

A. 9X0 

A, 9X1 

CTB 

CTS3 

CT9 

CTS3 



J POINT SETPOINT. 

; POINT DATA 

JCLBAX CAXXT 

tm PSBSS: SETPOINT 

SSUBTXACT HEAS. tiUs, 

;IF HV>SP 

t INCXEASE OUTPUT 
8 END 

I ELSE. DECX. OUTPUT 
; END 

J POINT NEXT SETPOINT 
iGST TEMP. SETPOINT 

9 DECXEASE OUTPUT 
; END 

J*"no 

{POINT NEXT SETPOINT 

■?";«»• SEIPOIBT 
|S»Bmci HUH. „H»S. 

S DECXEASE OUTPUT 
; END 

i^^NO 

; POINT NEXT SETPOINT 

.-GET COHC. SETPOINT 
;3U.mcj COHC. -J.. 

S DECXEASE OUTPUT 
t END 

SBI^B. INCX. OUTPUT 

; END 

sftETUXN 
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SOFTUARE TICK TIHEKS (50 IISEC) 



DTTi 


MOV 


RD.tTTHO 


;POINT FIRST TICK TXHER 




nov 


A.9S0 


;GET LAST COUNT 




JZ 


TTl 


;IF COUNTOO 




DEC 


A 


; DECREHEJIT ACC. 




HOV 


•EO.A 


; UPDATE 'COUNT 




JZ 


• TTl 


; IF NOT TIHEOUT 




CLE 


TFLO 


; CLEAR FLAG 




SJHP 


TT2 


1 END 


Til: 


SETB 


TFLO 


} ELSE, SET FLAG 


IT2: 


NOP 




; END 


; 


HOV 


RO.ITTHl. 


: POINT SECOND TICK TIHER 




HOV 


A.9R0 


;GET LAST COUNT 




JZ 


TT4 


;IF COUNTOO 




DEC 


A 


i DECREHENT ACC. 




HOV 


•RO.A 


{ UPDATE COUNT 




JZ 


TTl 


{ IF NOT TIHEOUT 




CLE 


TFLX 


; CLEAR FLAG 




SJHP 


TT5 


{ END 


TT4: 


SETB 


TFLl 


t ELSE, SET FLAG 


TTSs 


NOP 




t END 




EST 




(RETURN 



SOFTUAKE SECOND TIHERS 



OST: 


HOV 


•RO.tSTHO ;POINT FIRST SEC. TIHER 




HOV 


. A,9R0 


iGET LAST COUNT 




JZ 


STl i 


;IF COUNTOO 




DEC 


A i 


; DECREHENT ACC. 




HOV 


•RO.A 


i UPDATE COUNT 




JZ 


STl 1 


IF NOT TIHEOUT 




CLR 


TFL2 } CLEAR FLAG 




SJHP 


ST2 


; END 


STl: 


SETB 


TFL2 1 


i ELSE, SET FLAG 


5T2: 


. . NOP 




; END 


• 
f 


HOV 


RO.fSTHl 


; POINT NEXT SECOND TIHER 




HOV 


A.9R0 


;GET LAST COUNT 




JZ 


ST4 


ilF COUNTOO 




DEC 


A 


; DECREHENT ACC. 




HOV 


fRO.A 


i UPDATE COUNT 




JZ 


ST4 ; IF NOT TIHEOUT 




CLR 


TFLS ; CLEAR FLAG 




SJHP 


STS ; END 


ST4: 


SETB 


TFL3 


; ELSE, SET FLAG 


ST5: 


NOP 




; END 




RET 




; RETURN 
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SOFTUAJtE nXNUTE TIREKS 



MTlj 

nT2t 



nov 
nov 

JZ 
DEC 

nov 

JZ 
CIS 

SJHP 
SETB 
SOP 



EO.tKTKO 
A.fRO 
HTl 
A 

fBO.A 

MTl 

TFL4 

HT2 

TFL4 



nri: 

KT5: 

;**t*t 

OCTO: 



HOV KO.iHTHl 

HOV A,g£0 

JZ IIT4 

OBC A 

MOV WO. A 

JZ Mil 

CLE ms 

SJHP HTS 

SEIB TFL5 
NOP 
RET 

50FTUARE COUNTERS 



I POINT FIRST HIN. TIBER 
:CET LAST COUNT > 
I IF COUNTOO 
; OECRENSNT ACC. 
; UPDATE COUNT 
t ZF NOT TINEOUT 
; CLEAR FUG 
} END 

; ELSE, SET FLAG 
; END 

; POINT SECOND HIN. TIBER 

{GET LAST COUNT 

;ir COUNTOO 

> OECREBENT ACC. 

; UPDATE COUNT 

} IF NOT TIBEOUT 

; CLEAR FLAG 

; END 

; ELSE, SET FLAG 

; END 

{RETURN 



OClt 
DC2s. 



DCTlt 



DC3« 
DC4: 



BOV 
BOV 
JZ 
DEC 
BOV 
JZ 
CLE 
SJBP 
SETB 
NOP 
RET 

BOV 

BOV 

JZ 

DEC 

BOV 

JZ 

CLR 

SJBP 

SETB 

NOP 

RET 



RO.fCNTO 
'A,«RO 
DCl 
A 

•RO.A 

DCl 
TFL6 
DC2 
TFL« 



RO.fCNTl 
A.9R0 

DCl 
A 

9R0.A 

DC3 
TFL7 
DC4 
TFL7 



{POINT FIRST COUNTER 

{GET LAST COUNT 

{IF COUNTOO 

{ DECREBENT ACC. 

{ UPDATE COUNT 

{ IF NOT ZERO 

i CLEAR FLAG 

{ END 

{ ELSE, SET FLAG 

{ END 

{RETURN 

{POINT SECOND COUNTER 

{GET LAST COUNT 

{IF COUNTOO 

{ DECREBENT ACC. 

{ UPDATE COUNT 

: IF NOT ZERO 

t CLEAR FLAG 

{ END 

{ ELSE. SET FLAG 

{ END 

{RETURN 
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......... 

A»L C «Jo »f^' OUTPUT-0 

MOV tvos C '2^^°" " ENABLED 

ANL C Si OUTPUT-1 

. «xo»»C ; OUTPUT TO HI 
■ HOV r CTBi 

ANL c CEH2 OUTPUT-2 

nOV WO* C '^^^^^ " ENABLED 

^^°*»*^ ^OUTPUT TO V6 

NOV c CTBa » - 

ANL c SS; OUTPUT-3 



NOV woJ C ENABLED 

{OUTPUT TO V4 

EST 
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INXTs 



POUER-ON INXTXALIZATZOR 



••*••«•«***•*•«••««•*•««•««*•• 

IfOV SF.tOtfOB 
nOV PSU.tBHXO 
CL« A 
nOV R0.«2 
nOV 11,1126 
ROV WO\A 
INC so 
DJNZ Kl.ILF 

nOV TICK.«8 

ROV TSEC,«20 

ROV TRIM. « 60 

ROV PSV.IBNKl 

ROV tPUT.|40B 

ROV RTAX.t40B 

ROV IPUT,#50H 

ROV TTAX.tSOH 

ROV PSU.«BNX2 

ROV STATE, to 

ROV ABORT. «0 

ROV SCON,«052B 

ROV TnOD,t061B 

ROV*. B7B.J00B 

ROV IP,t002B' 

ROV IB.t09«a 

ROV TLO,|LOUC-3120) 

ROV TBO.tBIGBC-3120) 

ROV TBI. 1-13 

ROV A.tOFFB 

CLR PI. 4 

ROV DPTR.tTO 

HOVX #OPTR,A 

ROV DPTR.ITl 

nOVX iOPTR.A 

ROV DPTR,ftY2 

HOVZ 80PTR.A 

ROV DPTR.IT3 

ROVX •DPTR.A 

SETB PI. 4 

ACALL RUT 

ROV TIHE.IO 

ROV TIlIE«l.fO 

SETB TRl 

SETB TRO 

SJttP HAIR 



;IlfITXALXZS STACK POIHTER 
SUSB RBO 

i CLEAR ACCURULATOR 
; POINT LOU^T RAR LOC. 
FOR Rl:«126 OOUNTO 0 DO 
CLEAR RERORT LOC. 
POINT NEXT LOCATION 
END 

t INITIALIZE TICK COUNT 
{INITIALIZE SEC. COUNT 
; INITIALIZE HIN. COUNT 
'USE RBI 

I INITIALIZE RPUT POINTER 
{INITIALIZE RTAK POINTER 
{INITIALIZE TPUT POINTER 
{INITIALIZE TTAK POINTER 
{USB RB2 
{ STATE :»0 
{ABORT :«0 

{SET SERIAL PORT BITS 
{SET TIHER RODES 
{SET SROD:«0 IN PCON 
{SET INTERRUPT PRIORITIES 
{ENABLE INTERRUPTS 
{LOAD COUNT(L) 
{LOAD COUNT(B) 
{SET BAUD RATE (1200) 
{SET ACCUn. ALL 1*S 
{ENABLE I/O 
{POINT TO OUTPUTS 
{CLEAR TO 
{POINT Tl OUTPUTS 
{CLEAR Tl 
{POINT T2 OUTPUTS 
• CLEAR T2 
{POINT Y3 OUTPUTS 
{CLEAR 73 
{DISABLE I/O 
i RESET UATCBD06 TIRBR 
{CLEAR TIRE(L) 
{CLEAR TIRB(B) 
{START BAUD CLOCK 
: START TIHER 
{START RAIN PROGRAR 



TEST: 



RET 



{TEST COnPUTER FUNCTIONS 
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SEOUENCINC FROG&AH 



SEQ: 



SOI: 
502 1 



SEOK: 



503 s 



REPEAT 
USE tB2 

GET CURRENT STATE 
COnPARE.HAZ. STATS 
IF INVALID STATE 
TAKE STATE t31 
SET STATS TO «31 
END 

ELSE, USE CURRENT STATE 
END 

bake it 4-btte- 
address offset 
offset in juhf tablb 
perforh stats 

GET ALARH FLAG 
OR UITH TIHEOUT FLAG 
IF (ALn.OR.THO) 
GET ABORT STATS 
SET STATE TO ABORT 
CLEAR HOLD FLAG 
END 
UNTIL BOLD 
RETURN 



NOP 




NOV 


PSV,tBNK2 


nov 


A, STATE 


ADD 


A.INOTCSHAZ) 


JNC 


501 


nov 


A.«31 


nov 


STATE, A 


sjnp 


502 


nov 


A, STATE 


NOP 




RL 


A 


RL 


A 


nov 


DPTR.fjnPTBL 


JHP 


•A^OPTR 


nov 


C.ALHF 


ORL 


C.TnOF 


JNC 


• 503 


nov 


A. ABORT 


nov 


STATE, A 


CLR 


FD 


NOP 




JNB 


. FO.SEO 


RET 





> 
s 

; 
I 
t 
t 

9 

t 
t 

m 

t 

i 
t 

m 
9 

• 
9 

t 
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tIAIN DISPATCHING PROGSAH 



IIAIN: 


NOP 

mW* 






JNB 


RINF.mfl 




LCALL 


Tin 


HNl: 


JNB 


SECF,nN2 




LCALL 


TIK 


nN2: 


JNB 


TICF,BN3 




LCALL 


TSO 


11N3s 


JNB 


RCVF.1IN4 




LCALL 


RCV 


nN4: 


JNB 


XHTF.HNS 




LCALL 


XHT 


HNS: 


LCALL 


TEST 




SJKP 


HAIN 


f 

6TCT: 


HOV 


A.«l 




lET 


RCV: 


CLR 


RCVF 




£EI * 




XHT: 


CLR 


XBTF 




RET 




SIOHNDs 


RET 





;00 FOREVER 

; IF l-HIN TIME 

I DO l-HIN FUNCTIONS 

: IF t-SEC TIRE 

t 00 l-^SEC FUNCTIONS 

: IF TICK TINE 

; DO TICK FUNCTIONS 

t IF RCV Tins 

; . DO RCV FUNCTIONS ' 

; IF XHT TIHB 

; DO XHT FUNCTIONS 

; ELSE, PERFORH TESTS 

;END 

;READ SRAH 

; RESET RCV FLAG • 

(RESET XRT FLAG 

; SERIAL I/O HANDLER 



SINCLUDECSTATES.SRC) 
END 



wo 86/04698 



PCr/US86/00258 



6 6- 



* STATE JUnP TABLE 

* 



ljup 


STATED 


OB 


0 


Ljnp 


STATEl 


DB 


0 


LJIIP 


STATES 


OB 


0 


LJnp 


STATES 


OB 


0 ■ 


LJHP 


STATE4 


OB •. 


0 


LJRP 


STATES 


OB 


0 


LJHP 


STATE6 


OB 


0 


LJHP 


STATE? 


DB 


0 


LJHP 


STATES 


OB 


0 


LJHP 


STATS9 


DB 


0 


LJHP 


STATEl 0 


OB 


0 


LJHP 


STATEl 1 


OB 


0 


LJRP 


STATEl 2 


DB 


0 


LJHP 


STATE13 


OB 


0 


LJRP 


STATEl 4 


OB 


0 


LJHP 


STATEl 5 


DB 


0 


LJRP 


STATEl 6 


DB 


0 


LJRP 


STATEl 7 


DB 


0 


LJRP 


STATEl 8 


DB 


0 


LJRP 


STATEl 9 


DB 


0 


LJHP 


STATE20 


DB 


0 


LJHP 


STATE21 


DB 


0 


LJRP 


STATE22 


DB 


0 


LJHP 


5TATE23 


OB 


0 


LJHP 


STATE24 


OB 


0 


LJRP 


5TATE25 
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OB 


0 


LJHP 


STATE26 


DB 


0 


LJBF 


STATE27 


DB 


0 


LJKP 


5TATE28 


DB 


0 


LJRP 


STATS29 


DB 


0 


LJHP 


STATS30 


DB 


0 


LJRP 


5TATE3X 


DB 


0 


LJHP 


STATE32 


DB 


0 


LJHP 


STATES^ 


OB 


0 


LJHP 


STATS34 


OB 


0 


LJHP 


STATE3S 


OB 


0 


LJHP 


STATE36 


DB 


0 


LJHP 


STATE37 


OB 


0 


LJHP 


STATE38 


OB 


0 
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StATEO: hOV 
ROV 
HOV 
HOV 
80V 

nov 

BOV 
ROV 
HOV 
HOV 
HOV 
ROV 
ROV 
HOV 
CLR 
LJHP 



STATEl : 



Sllj 



512< 



STATE2: 



521 1 



S22: 
S23: 



JNB 
HOV 
ROV 
CLft 
SETB 
CLR 
SJRP 
- SETB 
CLR 
SETB 
NOP 
LJRP 

JNB 

ROV 

HOV 

CLR 

SETB 

HOV 

CLR 

CLR 

CLR 

CLR 

HOV 

CLR 

SETB 

CLR 

SJHP 

JB 

HOV 

ROV 

CLR 

SJHP 

SETB 

NOP 

LJHP 



STATE, #1 

ABORT, «1 

STAT.fOOH 

CTRL,«OOR 

TCEN.IOOI 

TCFL.«OOR 

1ISK0»«00I 

HSXl.tOOB 

nSX2 . iOOB 

RSK3,«00K 

CCOO.tOOR 

CCOl.tOOH 

CCO2,«40H 

CCO3.«00H 

FO 

SEOR 

DSCl.Sll 

STATE. t2 

ABORT, 129 

LTOl 

LTll 

FO 

SI 2 

LTOl 

LTll 

FO 

SEQR 

5UC1.S21 
STATE, «3 
ABORT. «29 
LTll 
LT12 

CNTO,#CNTH 

TFL6 

HVC7 

HV07 

W07 

TTHO.IVDLT 

TFLO 

TENO 

FO 

S23 

0SC1.522 

STATE,! I 

ABORT. #29 

FO 

S23 

FO 

SEQR 



STATE: Ml 
ABORT :«1 
RESET status' 
RESET CONTROLS 
RESET ALARRS^ 
RE3ET TIHEOUT FLAGS 
RESET CLOSED HASX5 
RESET OPEN HASXS 
RESET Hist. RA5KS 
RESET RISC. HASKS 
RESET ALARH LIGHTS 
RESET RUN LICBTS 
RESET ALL VALVES 
RESET RISC. OUTPUTS 
CLEAR HOLD FLAG 
RETURN 



IF DOOR CLOSED 
STATE :«2 
ABORT: >2 9 
DOOR-OPEN(OFF) 
READY-FOR-cyCLB(ON) 
CLEAR BOLD FLAG 
END 

ELSE, DOOR-OPENCON) 
READY-FOR-CTCLBCOFP) 
SET HOLD FLAG 
END 
RETURN 



;IF START-CYCLE (PUSHED) 
; STATE :»3 
t ABORT: »2 9 

READY-FOR-CYCLE(OFF) 
CYCLE-IN-PROGRESS(ON) 
LOAD H2N. COUNT 
CLEAR COUNT FLAG 
CLEAR VC7 HASK 
CLEAR V07 HASJC 
CLOSE-BREAK-VALVB 
LOAD TIMEOUT DELAY 
RESET TIHEOUT FLAG 
ENABLE TIHEOUT ALARR 
CLEAR HOLD FLAG 
END 

{ELSE. IF DOOR-OPEN 
I STATE :«1 
{ ABORT:«29 

CLEAR HOLD FLAG 
END 

ELSE. SET HOLD FLAG 
END 
RETURN 
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STATH3: 



snt 



S32: 
533: 



JNB 
HOV 

now 

CLS 

SETB 

SETB 

5£TB 

ttOV 

CLK 

SETB 

CLR 

SJRP 

JB 

HOV 

nov 

SETB 

cut 

SJHP 
SETB 
NOP 
LJnP 



STATE. #4 

ABOUT. 129 

TEND 

HVC7 

IIV07 

BTOl 

RTnO.iBOLT 

TFL4 

TEV4 

PO 

S33 

DSC1.S32 

A. ABORT 

STATB.A 

LTOl 

FO 

S33 

PO 

5E0E 



V7 CLOSED 
STATE: «4 / 
AB0KT:«29 

5e?";c?'2LT 

SET V07 HASK 

HEATEE ON 
J.OA0 HEATEE TIHEOttT 

;bsbt tiheout flag 
cleae hold flag 

END . 
ELSE, IF DOOR OPEN 
GET ABORT STATE 
STATE:. ABORT-1 
DOOR-OPBN(OH) 
» CLEAR BOLD FLAG 
I END 

! ^^^^ SET HOLD FLAG 
{RETURN 
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STATB4: JNB 

nov 

HOV 

CLt 

S^TB 

HOV 

SETB 

CLR 

CLR 

SETB 

nov 
cut 

SETB 
CLK 
SJHP 
S41: JB 

nov 
nov 

SETB 

CL£ 

SJHP 

S42: SETB 
S43: NOP 

LJnp 

STATES: JNB 

• nov 
nov 

CLR 

SETB 
SETB 
SETB 
SETB 

nov 

CLE 
CLR 

sjnp 

S51: JB 

nov 
nov 

SETB 
CLR 

sjnp 

S52: SETB 
MOP 

S53: LJnP 



STATE«: 



JNB 
CLR 

nov 

SUBB 
JC 

nov 
nov 

CLR 



TSC1«S41 
STATE, #5 
ABORT. #29 
TEN4 
HTCl 

STPl.tTSPl 
CENl 

iivci 

HVOl 
WOl 

TTnO.IVDLT 

TFLO 

TEND 

PO 

S43 

OSC1.S42 

A. ABORT 

STATE. A 

LTOl 

FO 

S43 

FO 

SEQR 

LS01.S51 
STATE. t 6 
ABORT. #29 
TEND 

nvci 
nvoi 

PPOl 
LT13 

HTnO.iTVAC 

TFL4 

FO 

S53 

DSC1,S52 

A. ABORT 

STATE. A 

LTOl 

FO 

S53 

FO 

SEQR 

TFL4.S62 

C 

A.AOIO 
A.IPVAC 

S6l 

STATE. #7 
ABORT. #29 

nvci 



IF BEATER ON 
STATE: »S 
ABORT: •29 

CLEAR TIHEOUT ENABLE 
SET lEnP SU HASK 
LOAD TEHP. SETPOINT 
ENABLE TEHP. CONTROL 
CLEAR Vfl HASK 
CLEAR VOl RASX 
OPEN VI 

LOAD TIHEOUT DELAY 
RESET TIHEOUT FLAG 
ENABLE TIHEOUT ALARH 
- CLEAR BOLD FLAG 
END 

ELSE. IF DOOR OPEN 
GET ABORT STATE 
STATE: «AB0RT-1 
OOOR-OPEN(ON) 
CLEAR BOLD FLAG 
END 

ELSE. SET BOLD FLAG 
END 
RETURN 



.; 

f 
t 
t 

f 
I 
I 

; 

s 
» 
; 
; 

p 

; 
I 
t 



;IF VAC VALVE OPEN 
: STATE 
; ABORT: >2 9 
; CLEAR TIHEOUT ENABLE 
{ SET VCl HASK 
; SET VOl HASK 
TURN PI ON 
EVAC- I N-PR06RE5S ( ON ) 
LOAD EVAC TIHE 
RESET TIHEOUT FLAG 
CLEAR BOLD FLAG 
END 

ELSE. IF DOOR OPEN 
GET ABORT STATE 
STATE :=AB0RT-1 
OOOR-OPEN(ON) 
; CLEAR HOLD FLAG 
END 

ELSE. SET HOLD FLAG 
END 
RETURN 



IF EVAC TIHE 
CLEAR CARRY 
GET PRESSURE 
SUBTRACT PRESS. LIHII 
IF P.LB.PVAC 
» STATE: «7 
9 ABORT :>29 
t CLEAR VCl HASK 
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56 li 



Stf2: 
563: 



Cll HVOl 

CLR WOl 

HOV. mo.ivoLi 

CLE- • TPLO 

SETB TEND 

CLE FO 

5J1IP S63 

SETS 1102 

MOV A.ABOET 

KOV STATE. A 

CLE FO 

SJHP 563 

SETB FO 
HOP 

LJHP 5Sg& 



CIEAE VOX RASE 
CLOSE VI 
LOAD TinSOUT 
KESET TIHEOUT FLAG 
ENABLE TIllEOUT ALABH 
CLEAE BOLD FLAG 
END / 
ELSE, fiVAC-FAILCOH) 
GET ABOIT STATE 
STATE: »AB0ET-1 
CLEAR HOLD FLAG 
END 

ELSE, SET HOLD FLAG 

END 
RETURN 
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STATE? t 


JNB 




ROV 




nov 




CLX 




SETB 


• 


SETB 




nov 




CLX 




CU 


S7li 


SJRF 


SETB 




NOP 


872 1 


unp 


t 




STATS8: 






CLE 




nov 




SUBB 




JC 




nov 




nov 




nov 




CLE 




CLE 




SETB 




ROV 




CLX 




CLX 



SBli 



S82: 
S83: 



SETB 

CLX 

SJRP 

SETB 

ROV 

ROV 

CLX 

SJRP 

SETB 

NOP 

LJRP 



STATE*: JNB 
CLX 

nov 

SUBB 
JC- 
ROV 
ROV 

nov 

CLX 

CLX 

SJRP 

S»l: SETB 
ROV 
ROV 
. SJRP 



ISC1.S71 
STATE. «8 
AB0XT.«29 

TEND 
RVCl 
RVOI 

RTRO.tLXBT 

TFL4 

PO 

572 

PO 

SEOK 
TPL4.Sa2 

c 

A.AOIO 

A.tPXLX 

S81 

STATE, i> 

AB0KT,«30 

STP2.IBSP1 

nvo< 

RVC4 
CEN2 

RTRO.fBURT 

TPL4 

LT13 

LT14 

PO 

S83 

LT02 

A.ABOXT 

STATE.A 

PO 

S83 

PO 

SEQX 

TPL4,S»2 
C 

A.A0I3 

A.tBNOR 

591 

STATE, #10 

AB0XT,#30 

HTRCtBURH 

TFL4 

PO 

S83 

LT03 

A.ABOXT 

STATE,A 

S93 



;XiP VI CLOSED 
; STATE :«8 
AB0XTt«2» 
DISABLE TinXOUT 
SET VCl HASX 
SET VOl HASK 
LOAD LEAK BOLD TIRE 
«BSET TIREOUT PLA6 

1 CLEAX BOLD FLAG 

2 END 

I ELSE. SET BOLD FLAG 

; END 

tXETUXN 



■; 
I 
I 

m 
9 

I 

i 



IZF LEAK BOLD TZRB 
t CLEAX CAXXT 
GET PKESSUXE 
SUBTXACT LEAK LIHIT 
IP P.LE.PXLK 
STATE: •9 
ABOXT:«30 
GET aun. SBTPOINT 
CLEAX V04 RASE 
CLEAX VC4 RASX 
ENABLE BUR. LOOP CV«) 
LOAD BUR. TIREX 
"fW TIREOUT FLAG 
EVAC-IN-PXOGXBSS(OFF) 
PILL-IN-PXOCXBSS(ON) 
CLEAX BOLD PUG 
END 

ELSE, EVAC-PAIL(OM) 
GET ABOXT STATE 
; STATE: »AB0XT-1 
t CLEAX HOLD FLAG 
» END 

;^"nd 

:XETUXH 



t 

V 

s 
t 
I 

» 

s 
t 
t 

t 

m 
9 

m 
9 

; 
; 



9 
9 

; 

9 
^ 9 
9 
• 

s 
s 
I 

9 

t 



IF HUH. TIRE 
CLEAX CAXXT 
GET RURIOITT 
SUBTXACT HUR. LEVEL 
IP BUR.GE.HNOR 

STATE: atO 

ABOXT: -30 

LOAD BUR. HOLD TIREX 
XESET TIREOUT FLAG 
CLEAX HOLD FLAG 
END 

ELSE. FILL-PAIL<ON) 
GET ABOXT STATE 
STATE :*AB0XT-2 
END 
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3.Z 



592 1 


5ETB 


FO 


593: 


NOP 






unp 


SEQE 

• 


; 

5TATE10: 


JNB 


TPL4,510i 


. 


nov 


STATE, «11 




nov 


ABORT. «30 




CLR 


1IVC2 




CLR 


11V02 




SETB 


VV02 




CLR 


uvea 




CLR 


nvo8 




5ETB 


W08 




nov 


TTnO.fVDLT 




CLR 


TFLO 




SETB 


TEND 




MOV 


STPO.tPSPl 




CLR 


nvos 




CLR 


nvcs 




SETB 


CENO 




CLR 


FO 




SJHP 


S102 


5101 1 


SETB 


PO 


S102i 


NOP 




LJHP 


SEOR 



'<ELSE. SET HOLD FLAG 

i END 

SRETURN 

tip BUH. HOLD TINE 

; STATE$*11 

; ABORT :"40 

; CLEAR VC2 IIASX 

S CLEAR V02 IIASX 

; OPEN V2 

; CLEAR VC8 HASX 

{ CLEAR V08 HASH 

; OPEN Va 

: LOAD VALVE TIHEOUT 
I RESET TIHEOUT FLAG 
; ENABLE TIHEOUT ALARH 
I GET PRESS. SETPOINT 
; CLEAR V05 MASK 
; CLEAR VC5 HASX 
t ENABLE PRESS. LOOP CVS) 
: CLEAR BOLD* FLAG 
: END 

;ELSE. SET HOLD FLAG 

I END 

{RETURN 
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STATE 11 


i HOV 




mi A* 




JVC 




ROV 




















SETA 




SETA 












WA#Jl . 




SETA 




BOV 




CLS 




CLt 




5ETB 




CLE 




SJHP 


Sill: 


5ETB 


Sll2s 


NOP 




LJHP 



STATE12t JNB 
CLE 
MOV 
5UBB 
JC 
HOV 
HOV 
HOV 
CLE 
CLE 
SJHP 

S121: SETB 
HOV 
ROV 
CLE 
SJHP 

SI 22: SETB 
SI 23: NOP 
LJHP 

STATS13: JNB 
CLE 
HOV 
SUBB 
JC 

nov 

HOV 
CLE 
SJHP 

S131t SETB 

nov 



C,LS02 
C.ISOS 
Sill 

STATE, #12 
AB0ET,t31 

TEND 
HVC2 
KV02 

uvea 

RV08 

STP3,«CSP2 

nvo4 

HVC4 
CEN3 

HTHD.ICHCT 

TF14 

LT14 

LT15 

PO 

S112 
PO 

SEQE 

TFL4.S122 
C 

A.AOIS 

A.tCNOn 

S121 

STATE. #13 

AB0ET,«31 

HTHO.tCONB 

TFL4 

FO 

S123 
LT04 
A.ABOET 
STATE. A 
FO 

S123 
FO 

SEQE 

TFL4.S132 

C 

A.A0I3 
A.tCNOR 

S131 

STATE. #14 
AB0ET.I31 
FO 

5133 
LT04 
A.ABOET 



;TEST V2 OPBH- 
;ANO V8 OPEN 
;IF (V2.AN0.V8> OPES 
; STATE: «12 
; AB0ET:«31 
t OISABLE TIHEOUT FLAG 
. t SET VC2 HASK 
I ■ SET V02 HASK 
i - SET VC8 HASK 
t SET VOa^'HASX 
I GET CONC. SBTPOIVT 
; CLEAE V04 HASK 
I CLEAE VC4 HASK 
I ENABLE CONC. LOOP (V4) 
t • LOAD CONC. TIHEE 
; BESET TIHEOUT FLAG 
I FILL^ZK-PEOGBESSCOFF) 
t STEEIL-IN-PEOGEESS(OB) 
t CLEAE HOLD FLAG 
t END 

; ELSE. SET BOLD FLAG 

; END 

;BETUEH 



;IF CONC. TIRE 

t CLEAE CAEEX 

I GET CONC. 

; SUBTEACT CONC. LEVEL 

; IF CONC.GE.CNOH 

; STATE: •13 

S AB0ET:»31 

; LOAD CONC. HOLD TIRER 

t BESET TIHEOUT FLAG 

I CLEAE BOLD FLAG 

: END 

t ELSE, STEEIL-FAIL(ON) 
: GET ABORT STATS 
; STATE :«AB0BT-3 
t CLEAE HOLD FLAG 
; END 

.•ELSE. SET HOLD FLAG 

> END 

{EETURN 

(IF GAS BOLD TIHB 
; CLEAE CAEET 
; GET CONC. 

; SUBTEACT CONC. LEVEL - 
IF CONC.GE.CNOR 
STATE: •14 
AB0ET:*31 
CLEAE HOLD FLAG 
END 

ELSE. STESIL-PAILCOH) 
GET ABOET STATE 



HOV STATE, A 

CLE FO 

SJHP SI 33 

SI 32: SETB FO 

SI 33: NOP 

LJHP SEQE 



I STATE: »AB0RT-3 
t CLEAE HOLD FLAG 
t END 

;ELSB, SET BOLD FUG 

t END 

:EETUBB 
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STATE14S cut 

nav 

SUBB 

JC 

CLX 

nov 

SUBB 
JC 

aov 

ROV 
BOV 
CLE 

cu 

SJflF 

suit 5ETB 

nov 

ROV 

cut 

S142: MOP 
LJRF 



5TATE15 


: JNB 




ROV 




ROV 




CLX 




CLX 




CLE 




CLS 




CLE 




CLE 




CLE- 




CLE 




CLE 




ROV 




CLE 




SETB 




CLE 




SJRP 


S151: 


SETB 


S152: 


NOP 




LJHP 



STATEltfs ROV 
AKL 
ANL 
JNC 
ROV 
ROV 
CLE 
SETB 
SETB 
SETB 
SETB 
SETB 
SETB 



C 

A»ADI1 
A.tTLOtf 
SI 41 
C 

A.ITRAZ -• 

A.ADIl 

S141 

STATE. «15 

AB0ET.f3X. 

BTHO.tTSTE 

TFL4 

PO 

S142 
LT04 
A.ABOBT 
STATE, A 
FO 

SBOE 

m4.S25X 

STATE. «1« 

ABOET.fJl 

CENO 

CEN2 

CEN3 

CTBO 

CTE2 

CTE3 

W06 

W05 

W04 

TTRO.#VDLT 

TFLO 

TEHO 

PO 

S152 
PO 

SEOE 

C.LSC4 
C.LSC5 
C.LSC< 
SKI 

STATE. «1 7 

ABORT, #31 

TEND 

RVC4 

RV04 

RVC5 

RVOS 

RVC6 

RVOtf 



SCLEAE CAEE7 
.'GET TEHP. 

tSUBTEACT RIM. TEHP. 
;XP TERP.GE.THIM 
I CLEAE CAEET 
S CBI HAI. TEHP LEVEL 
I SUBTEACT TEHP. 
I IF TEHPyLE.IHAE 
r STATE: -IS 
AB0ET:«31 

LOAD STEEIL. TIREE 
EESET riREOUT FUG 
CLEAE HOLD FLAG 
EHO 

;ELSE. STBEIL-FAIL(OM) 
» GET ABOET STATE 
; STATE :«AB0Et-3 
I CLEAE BOLD FLAG 
t EMS 
tEBTUER 



f 
I 

P 

i 



»IF STBEIL. IIHB 

: STATE: >1« 

t ABOET t«3l 

t PEESS. LOOP (OFF) 

; BUR. LOOP (OFF) 

; GAS LOOP (OFF) 

S PRESS. OUTPUT (OFF) 

; HUH. OUTPUT (OFF) 

t GAS OUTPUT (OFF) 

t CLOSE V6 

I CLOSE VS 

; CLOSE V4 

; LOAD TIREOUT OELA? 

i EESET TIREOUT FLAG 

t ENABLE TIREOUT ALAEH 

; CLEAE HOLD FLAG 

: END 

;ELSE, SET HOLD FLAG 

t END 

tEETUEH 

;TEST V4 CLOSED 
sAND V5 CLOSED 
;ANO V« CLOSED 

CLOSED 

; STATE :«17 
ABOET :«31 

TIHEOUT ALAEH 
SET VC4 RASE 
SET V04 RASE 
SET VCS RASE 
SET V05 RASX 
SET VC« RASE 
t SET VO* RASE 
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5161 
S162! 



CLR 

CIX 

SETB 

CLR 

SETB 

KOV 

CLR 

SSTB 

CLR 

SJHP 

SETB 

NOP 

LJnp 



STATB17: BOV 
ANL 
JMC 
MOV 
NOV 
CLR 
SETB 
SETB 
SETB 
SETB 

nov 

CLR 
CLR 
SJHP 

SI 71: SETB 
S172: KOP 
LJNP 

t 



nvc3 

I1V03 
W03 
LT15 
LT16 

mo.fVOLT 

TFLO 
TEND 
FO 

FO 

SEQR 

C.LS03 
C.LS08 
S171 

STATE, #18 
ABORT. #31 
TEND 
»VC3 

nvo3 

HVC8 
IIV08 

MTno.tTEVC 

TFL4 

FO 

S172 
FO 

SEQR 



CLEAR VC3 MASIC 

• ; CLEAR V03 KASX 

■; OPEN V3 

I STER1L-IN-PR0GRESS(0FF1 

; fURGE-IN-PROGRESSfON) 

I "JjL^'«0"r DELAY ^ 

» «fiSBT TIMEOUT FLAG 

»ELSB, SET BOLD FLAG 

; END 

{RETURN 

;TBST V3 OPEN- 
;ANO V8 OPEN 

: STATE: alS 
ABORT: -31 

ire SiSf' 

SET V03MASK 
SET VC8 MASK 
* SET V08 MASK 
: "J2,«VAC. TIMER 
9 RESET TIMEOUT FLAG 

i^^NO "OLD FUG 
{RETURN 



» 
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HOV 




nov 




CLS 












CLS 




CLS 




CLS 




ROV 




CLK • 




SSTB 




CLE 




SJHP 


S1818 


5ETB 


5182: 


HOP 




LJHP 


t 





STATB19: ROV 
ANL 
JVC 
HOV 
ROV 
CLK 
SETB 
SSTB 
NOV 
CLR 
CLR 
SETB 
ROV 
CLI 
CLE 
SJHP 

5191s SETB 
5192: NOP 
LJHP 

STATEZOt JNB 
CLK 
HOV 
SPBB 
JC 
ROV 
ROV 
CLK 
CLK 
CLK 
ROV 
CLK 
SETB 
CLK 
SJHP 

S201S SETB 
HOV 



TPLI.SISI 

STATE, #l» 

ABORT. #31 

RVC3 

RV03 

W03 

HVCS 

RV08 

W08 

TTRO.fVOLT 
TFLO ' 
TEHO 
PO 

S182 
FO 

SBOK 

C.LSCl 
C.LSC8 
8191 

STATS. «20 
ABORT. «32 
TENO 
RVC8 
RV08 

STPO.fPSPl 
HV05 
HVCS 
CENO 

HTH0.#Plt2T 

TFL4 

FO 

S192 
FO 

SEQK 

TFL4.S202 
C 

A.IPRAZ 

A.AOIO 

S201 

STATE. •21 
ABORT. «32 

CEHO 
CTRO 
WO 5 

TTHO.IVDLT 

TFLO 

TENO 

FO 

S202 
LT05 
A. ABORT 



;XF EVAC. TIRE . 

{ STATS$*19 

: ABORT: -31 

: CLEAR VC3 RASX 

: CLEAR V03 RASX 

; .CLOSE V3 

: {CLEAR VC8 RASX 

; CLEAR V08 RASX 

S CLOSE V8 

: LOAD VA}.VE TIRER 

t RESET TIREOUT FLAG 

S ENABLE TIREOUT ALARH 

t CLEAR BOLD FLAG 

; END 

I ELSE. SET BOL0 FLAG 
I END 
I RETURN 

{TEST V3 CLOSED- 
;ANO V8 CLOSED 
{IF (V3.AND.V8) CLOSED 
; STATE: -20 
. : ABORTs«32 
t DISABLE TIREOUT ALASR 
; SET VC8 RASK 
; SET V08 RASK 
S GET PRESS. SETPOINT 
t CLEAR VOS RASK 
; CLEAR VC5 RASX 

ENABLE PRESS. CONTROL CVfi) 
I LOAD N2 PRESS. TIHER 
; RESET TIREOUT FLAG 
; CLEAR HOLD FLAG 
i END 

;ELSE. SET BOLD FLAG 

; END 

{RETURN 

;IF REPRESS. TIRB 

; CLEAR CARRT 

t GET RIN. PRESS. LEVEL 

I SUBTRACT PRESSURE 

I IF PRESS. GE.PRAZ 

t STATE: »21 

t ABORT: >32 

t N2 LOOP COFF) 

: N2 OUTPUT (OFF) 

; CLOSE N2 VALVE 

; LOAD VALVE TIHEOUT 

: RESET TIHEOUT FLAG 

; ENABLE TIHEOUT ALAXR 

t CLEAR BOLD FLAG 

t END 

» ELSE, PURGE-FAIL(OH) 
I GET ABORT STATE 



HOV STATE.A 

CLR FO 

SJHP S203 

S202t SETB FO 

S203: NOP 

LJHP SEOR 



S STATE :«ABORT-« 
; CLEAR BOLD TIRER 
I END 

{ELSE. SET BOLD TIRER 

: END 

{RETURN 
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STATE21: JHB 
ROV 

nov 

CLR 

SCTB 

SETB 

CLI 

CIS 

SETB 

CLR 

CLK 

SETB 

nov 

CLR 
SETB 
CLR 
SJHP 

suit SETB 
SZlZs MOP 

Ljnp 

t 

STATS22: NOV 
ANL 
JNC 

nov 
nov 

CLR 

SETB 

SETB 

SETB 

SETB 

nov 

CLR 
CLR 

sjnp 

S221: SETB 
S222: NOP 

Ljnp 



STATE23: 


JNB 




nov 




nov 




CLR 




CLR 




CLR 




CtR 




CLR 




CLR 




CLR 




CLR 




CLR 




nov 




CLR 




SETB 




CLR 


5231: 


SJHP 


SETB 


S232: 


NOP 




LJHP 



L5CS.8211 
STATE, « 22 
ABORT, #33 
TENO 

nvc5 
nvos 

.HVC3 
RV03 
W03 

nvca 
nvos 
woa 

TTH0.#V»LT 

TFLO 

TENO 

FO 

S212 
PO 

SEOR 

C.LS03 
C.LSOa 
S221 

STATE. 123 
ABORT, #33 
TENO 

nvc3 
nvo3 
nvc8 
nvos 

nTno.#DSRB 

TFL4 

FO 

S222 
FO 

SEOR 

TFL4.S231 
STATE, «24 
ABORT, #34 

nvc3 
nvo3 

W03 

nvcs 
nvos 
wos 
nvc2 
nvo2 

W02 

TTnO,»VDLT 

TFLO 

TENO 

FO 

S232 
FO 

SEOR 



tIF V5 CLOSED 

; STATE: -2 2 

S ABORT: •33 
• t DISABLE TXHEOUT ALARH 
*: I SET VC5 nASX ^ 
. 9 SET V05 HASK 

; CLEAR VC3 RASX ' 

} CLEAR V03 BASK ' 

t OPEN V3 

; CLEAR ViCS RASX 

; CLEAR VOS RASX 

; OPEN VS 

t LOAD TIHEOUT DELAY 
: RESET TIHEOUT FLAG 
I . ENABLE TINEOUT ALARH 
; CLEAR HOLD FLAG 
t END 

(ELSE, SET HOLD FLAG 

( END 

iRtTURH 

ITBST V3 OPEN- 

:AND VS OPEN 

tIF (V3.AND.VS) OPEN 

; STATE: «23 

; ABORT: »33 

I DISABLE TIHEOUT AURH 

; SET VC3 HASK 

; SET V03 HASX 

: SET VC8 HASK 

S SET VOS RASX 

I LOAD DESORB TIHBR 

; RESET TIHEOUT FLAG 

t CLEAR HOLD FLAG 

9 END 

t ELSE. SET BOLD FLAG 
; END 
; RETURN 

:IF DESORB TIHE 

} STATE: «24 

S ABORT: •34 

; CLEAR VC3 HASX 

t CLEAR V03 HASX 

S CLOSE V3 

; CLEAR VCS HASX 

S CLEAR VOS RASX 

{ CLOSE VS 

; CLEAR VC2 RASX 

: CLEAR V02 RASX 

i CLOSE V2 

t LOAD TIMEOUT DELAY 

; RESET TIHEOUT FLAG 

; ENABLE TIHEOUT ALARH 

; CLEAR HOLD FLAG 



; END 

|BLSE. SET HOLD FUG 
; RETURN 
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4^ATE2C: HOV 
ABL 
AVL 
JNC 
MOV 

nov 

CLE 

SETB 

5ETB . 

5£TB 

SETB 

SETB 

SETB 

SETB 

HOV 

LCALL 

cut. 

CLE 
SJHP 

S241: SETS 
S242: NOP 
LJRP 



STATE25: 


JNB 




CLE 




HOV 




SUBB 




OEL 




JC 




HOV 




MOV 




CLE 




CLE 




CLE 




CLE 




CLE 


S251: 


SJBP 


HOV 




HOV 




CLE 




SJHP 


S252: 


SETB 


S253: 


NOP 




LJHP 



t 

;STATE2tf: LCALL 
JNZ 
HOV 
HOV 
CLE 
CLE 
SETB 
CLE 
CLE 
SETB 



C.LSC3 
C.LSC8 
C,LSC2 
S241 

STATE. «25 
AB0ET,t35 
TEND • 
HVC3 
1IV03 

lives 
nvo8 

HVC2 
BV02 
L661 

HTHCtTLGH 

DCTO 

TFL4 

FO 

S242 
PC 

SEQB 

TFL4,S2S2 
. C 
A.tCRIN 
A,A0I3 
C, /TFL« 
S2S1 

STATE. 126 

AB0ET.|3« 

CENl 

PPOl 

BTOl 

LG62 

FO 

S253 

A.ABOET 

STATE.A 

FO 

S253 
FO 

SEOB 

CTCT 
S2tfl 

STATE. #27 
AB0ET.«3« 
1IVC2 
IIV02 

W02 
HVC3 
HV03 
W03 



I TEST V3 CLOSEO- 
•tAND V8 CLOSED- 
;AND V2 CLOSED 
;1F.(V2.V3.V8 CLOSED) 
t dTATE««2S 
ABOBT:*35 

DISABLE TIHEOUT RASX- 
SET VC3 HASX 
SET V03 HASX 
SET VC&r HASX » 
SET VOi HASX 
SET VC2 KASX 
SET V02 HASX 
50ITCB TO HIGH GAXN 
t . STAET LOU GAS HOLD ' 
: DECEEHENT PUE6E COUNT 
; EESET TIHEOUT FLAG 
t CLEAE BOLD FLAG 
{ END 

;ELSE. SET BOLD FLAG 

t END 

;EETUEN 



I 
I 
* 

t 
; 
; 
I 
( 
} 



IF LOU-HOLD TIHE 
CLEAE CABBT ' 
GET HAX. LEVEL 
SU8TEACT CONC. 
OE CAEEY UITH COUNT FLAG 
IF <C0NC.LE.CH1H).AND.TFL4«1 
STATE: «2< 
t AB0fiT:>3« 
t DISABLE TEHP. CTEL 
; TUEN PUHP OFF 
; TUEN HEATEE OFF 
t SET LOU GAIN 
; CLEAE BOLD FLAG 
t END 

; ELSE, GET ABOET STATE 
; STATS: sSS 
; CLEAE BOLD FLAG 
; END 

:ELSE, SET BOLD FLAG 

t END 

iXETUBH 

; DECEEHENT * GET CYCLE CNT 

;IF LAST BUN 

; STATE s>27 

t ABOET: «3« 

; CLEAE VC2 HASX 

8 CLEAE V02 HASX 

S OPEN V2 

; CLEAE VC3 HASX 

; CLEAE V03 HASX 

S OPEN V3 
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S2«l: 
SZtZs 



CLS 

CLX 

5ETB 

CLS 

CLK 

5ETB 

nov 

.CLE 
CLX 
5JHP 

nov • 

BOV 
CLS 
NO? 
LJHP 



HVC4 
nVGi4 
W04 
MVCB 
1IV08 
W08 

BTHO.tTDMP 

TFL4 

FO 

S262 

STATE, #28 
ABORT. «3« 
FO 

5E0K 



;^ CLEAR VC4 HASK 
; CLEAR V04 HASK 
'i • OPEN V4 

; CLEAR VC8 HASK " 
; CLEAR V08 HASK 
f OPEN V8 
; LOAD DUMP TIBER 
J RESET XIHEOUI FLAG 
; CLEAR HOLD FLAG 
; END 

tSLSE, STATE: -28 

; ABORT: «3tf 

; CLEAR HOLD FLAG 

; END 

{RETURN 
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5TAT£27 


: JNB 




HOV 




nov 




CLX 




CLK 




CU 




CLB 




CLX. 


5271: 


SJHP 


S£TB 


S272t 


NOP 




LJHP 



STATB28: BOV 
HOV 
CLB 

cut 

S£TB 

nov 

CLX 
LJBP 

STATE29: ROV 
AHL 
ANL 
ANL 
ANL 
ANL 
' ANL 
ANL 
ANL 
JNC 
NOV 
HOV 
HOV 
HOV 
ROV 
CLX 
SJHP 
S2>lt HOV 
HOV 
HOV 

nov 

HOV 
HOV 
HOV 
HOV 
S£TB 
SETB 
S292s NOP 
LJHP 

I 



tFL4.S271 

STATE. #28 

AB0XT.«3« 

W02 

W03 

W&4 

W08 

PO 

S272 
PO 

5S0X 

STATE, #37 

AB0KT,«3< 

RV05 

RVCS 

CENO 

STPO.tPATH 
PO 

SSQX 

C.LSCl 

C,LSC2 

C.LSC3 

C,LSC4 

C.LSC5 

C.LSC8 

C.LS07 

C,L5C8 

C.5UC2 

S291 

STATS. {2 
ABOXT.tO 
STAT. « DOB 
CCOO.fOOH 

ccoi,#oia 

PO 

S292 

CTKL.ffOOB 

TCEN.IOOa 

KSKO.fOOB 

ISKI.IOOB 

HSK2.t00R 

CC02.«40H 

CC03.«OOB 

CCOX.fOOH 

LT02 

PO 

SSQX 



I IF DUHP-T2RB 
.t STATS:-28 
; ; AB0XT:»3« 
t ' CLOSE V2 
t CLOSE VB 
' CLOSE V4 
: CLOSE V8 
{ CLEAX BOLD FLAG 
S END 

{"'So *^ 

SXETUXH 

{STATE: -ST 
{ABORT: •3« 
;CLX V05 RASE 
ICLX VC5 HASX 
{PRESS. CONTROLCONJ 

SETPOIMI 
(CLEAR BOLD PLA6 
{XETUXN 

{TEST VI CLOSEO- 
lAHD V2 CLOSEO- 
{ANO V3 CLOSED^ 
{AND V4 CLOSBD- 
{AND V5 CLOSED- 
:ANO Vtf CLOSED- 
{AND V7 OPEN- 
{AND V8 CLOSED- 
{ANO SU2 PUSBEO 
{IP XESET 
: STATE: •2 
{ ABORT :>0 
XESET STATUS 
llUl ^iws 

XESET XUN LIGBTS 
CLEAX BOLD PLAG 
END 

{ELSE, XESET CONTXOLS 

{ XESET ALAXRS 

{ XESET CLOSED RASES 

{ XESET OPEN HA5X5 

i XESET RISC. HASXS 

; XESET VALVES 

{ RESET RISC. OUTPUTS 

{ TURN CYCLE LIGBTS OPP 

{ EVAC-PAIL(Otf) 

{ SET BOLD PLAG 

{ END 

{XETUXN 
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STATE30: ROV 
ANL 
ANL 
AVL 
ANL 
ANL 
ANL 
ANL 
ANL 
JNC 

nov 

NOV 

nov 

HOV 

nov 

CLS 

sjnp 

S3 01: HOV 

nov 
nov 
nov 
nov 
nov 
nov 
nov 

SETB 
SETB 
5302: NOP 

LJnP 



C.LSCl 
C,L5C2 
C,L5C3 
C.LSCl 
C,L5CS 
C,LSCtf 
C,LS07 
C.LSC8 
C.SUC2 
S301 

STATE. «2 

ABOlT.fO 

STAT.fOOH 

CCOO.tOOH 

CCOI.IOIH 

FO 

S302 

CTRL.«OOB 
TCEN.tOOH 
nSXO.iOOB 

nsxi.tooH 

nSX2.«00H 

CC02,«40R 

CCO3.«00H 

CCOl.fOOH 

LT03 

FO 

SSOR 



J TEST VI CLOSED- . 
;AND V2 CLOSED- 
tANO V3 CLbSED- 
;AND V4 CLOSED- 
;AND V5 CLOSED- « 
tANO V< CLOSEO- 
;AND V7 OP^- 
;AND V8 CtOSED- 
;AND SU2 PUSBEO 
;IF BESET 
t STATE :»2 
; ABORT :«0 
; RESET STATUS 
; RESET ALARn LIGHTS 
I RESET RUN LIGHTS 
; CLEAR BOLD FLAG 
S END 

;ELSE, RESET CONTROLS 

; RESET ALARnS 

; RESET CLOSED HASXS 

; RESET OPEN HASXS 

i RESET HI SC. HASKS 

S RESET VALVES 

t RESET HISC. OUTPUTS 

I TURN CYCLE LIGHTS OFF 

; FILL-FAIL(ON) 

; SET HOLD FLAG 

; END 

; RETURN 



wo 86/04698 



82 



PCT/US86/00258 



STATEaii BOV 
ANL 
AHL 
ANL 
ANL 
ANl 
ANL 
ABL 
JVC 
HOV 

aov 

ROV 
HOV 

aov 

IWV 

nov 
nov 

CLR 
SJHP 
suit HOV 
BOV 
BOV 
BOV 
BOV 
BOV 
ROV 
SETB 
SETS 
S312< HOP 

LJB? 

I 

STATE32: BOV 
ANL 
JNC 
HOV 
HOV 
CLE 
SJHP 
S321: ROV 

SETB 
S322s NOP 
LJRP 

STATE33: HOV 
JNC 
HOV 
BOV 

ci:i 

SJHP 

S3 31.: SEIB 
S332: NOP 
LJHP 

STATE34: HOV 
JNC 



C.LSCl 
C.LS02 
C,LSC3 
C,LSC4 
C,LSC« 
C.LSC7 
C.LSC8 
C.SUC2 
S311 

STATE, «20 

ABORT, #31 

STAT,«OOB 

H5K0.«0EPH 

1ISX1,«0EPH 

1ISX2,«001H 

CC00.«00H 

CC01,t22B 
FO 

5312 

CTEL.903I 

TCBN.fOOH 

HSXO.tOOH 

HSXl,fOOH 

HSK2.tOOH 

CCO2.«02H 

CC03,«01H 

LT04 

PO 

5B0E 

C.LSCS 
C.SUC2 
S321 

STATE, #1? 

ABORT, #32 
PO 

S322 

CC02.#02B 
PO 

SBOR 

C,5UC2 
S331 

STATE, #23 
ABORT, #33 
PO 

S332 
PO 

SEQR 

C.5UC2 
S341 



;TEST VI CLOSED- 
{AND V2 OPEN- 
SAND V3 CLOSED 
;AND V4 CLOSED-' 
;AND V6 CLOSEO- 
.;ANO V7 CLOSED- 
;AND V8 CLOSED- 
;^D SUE PUSHED 
t'ff RESET 

STATE t ■20 
: ABORT: >32 
t RESET ^ATUS 
t SET ALL CLOSED RASES 
; SET ALL OPEN -RASES 
t SET RISC. RASES 
t RESET ALARR LIGHTS 
; -RESET RUN L2GBTS 
: CLEAR BOLD PUC 
t END 

J ELSE, RESET CONTROLS 
; RESET ALARH8 
s RESET CLOSED RASES 
RESET OPEN RASES 
RESET RISC. RASES 
RESET ALL VALVES 
RESET RISC. OUTPUTS 
STERIL-PAIL(ON) 
SET BOLD PLA6 
END 
iEETURN 

JTBST V5 ClOSED 
:AND SU2 

; ABORT: -32 

; CLEAR BOLD FLAG 

: END 

JBLSE, RESET ALL VALVES 
; SET BOLD FLAG 
t END 
: RETURN 

{TEST SUE 

(IP PUSBEO 

: STATE: •23 

; ABORT: -34 

; CLEAR BOLD FLAG 

t END - 

j8t5B> SET HOLD FLAG 

Uetorn 

:TEST SUE 
;IF PUSBEO 



HOV 

HOV 

LCALL 

CLE 

SJHP 

S341 : SETB 
S342: NOP 
LJHP 



STATE. #25 
ABORT, #35 
OCTO 
FO 

S342 
FO 

SEOR 



t STATE:* 25 
; ABORT: •35 

; DECREMENT PURGE COUNT 
t CLEAR BOLD FLAG 
t END 

;ELSE, SET BOLD FLAG 
; END 
; RETURN 
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nOV 


CyLSCl 




ANL 






ANL 


C»LSC3 




ANL 


C.LSC4 




ANL 


CLSCS 




ANL 


C,LSC6 




ANL 


C,LSC7 




ANL 


CLSCS . 




JNC 


S3S1 




nov 


STATE, #20 


- 


NOV- 


ABORT, #32 




NOV 


STAT.ioOH 




BOV 


nSKOttOEFH 




nov 


nSXl,«OEFH 




MOV 


lfSX2,t001B 




nov 


CCO0,«00B 




nov 


CCOt,«22B 




nov 


STPO,t?SPl 




SSTB 


CENO 




nov 


nTno,#PN2T 




CLR 


TFL4 




CLE 


FD 




sjnt 


5352 


5351: 


nov 


CTRL. to 3B 




nov 


TCEN,«OOH 




nov 


nSXO.fOOB 




nov 


nsxi.iooH 




nov 


nSX2.tOOB 




nov 


CCO2,«02H 




nov 


CC03.I01B 




SETB 


FO 


S352: 


NOP 






Ljnp 


SEQR 



.TEST VI CLOSEO- 
;AND V2 OPEN- 
;ANO V3 CLOSED- • 
;ANO V4 CLOSEO- 
;AND V5 CLOSED- 
;ANO V« CLOSEO- 
;l&«0 V7 CLOSEO- 
;AND V8 CLOSED- 
';ZF RESET 
; STATE: •20 
; AB0ETt«32 
I RESET STATUS ; 
$ SET ALL CLOSED NASXS 
: SET ALI^ OPEN HASXS 
; SET niSC. HASXS 
; RESET ALARM LIGBT5 
; RESET RUN LIGHTS 
; LOAD PRESS. 5ETP0XNT 
I ENABLE PRESSURE CONTROL 
I SET PRESSURE TIHER 
t CLEAR TinER FLAG 
; CLEAR HOLD FLAG 
; END 

;ELSE, RESET CONTROLS 
; RESET ALARnS 
t RESET CLOSED HASXS 
; RESET OPEN HASXS 
; RESET HI SC. HASXS 
t RESET ALL VALVES 
; RESET HISC. OUTPUTS 
: SET HOLD FLAG 
; END 
: RETURN 



STATE3<: HOV 
JNC 
HOV 

nov 

CLR 
SJHP 

S3«l: SETB 
5362: NOP 
LJnP 



C,SUC2 
5361 

STATE, #26 
ABORT, #37 
FD 

5362 
FO 

SEQR 



TEST SU2 
IF PUSHED 

STATE: •2 6 

ABORT: >37 

CLEAR BOLD FLAG 

END 

ELSE, SET. HOLD FLAG 

END * 
RETURN 
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STATB37t 


CLK 


C 




nov 


A.IPATH t 


* 


5UBB 


A.AOIO 




JC 


S371 




nov 


STATE. «3S 




nov • 


ABORT. fO 




CLR 


HVC7 




CLR 


HV07 






C£NO 




CLR 


CTRO 




CLR 


W05 




5ETB • 


W07 


• 


CLR ■ 


LTi6 




5E7B 


LT17 




CLR 


FO 




SJJl? 


S372 


S371: 


SETB 


FQ 


S372: 


HOP 




• 


Ljnp 


SEOR 


STATE38t 


JNB 


SUC2.5381 




nov 


STATE. to 




nov 


ABORT. fO 




CLR 


FO 




sjnp 


S382 


S3S1: 


SETB 


FO 


^382: 


NOP 






Ljnp 


SEQR 



CLEAR CARRY 

CBT ATn SETPOIHT 
SUBTRACT PRESSURE 
XF PRESS. CT. ATn 
STATE :«38 
ABORT :«0 
CLEAR VC7 HASX 
'CLEAR V97 BASK 
S2 LOOFCOFF) 
H2 0UTPC6FF) 
CLOSE N2 VALVE 
OPEN V7 

PURGE- tN-PROGRESS(OFF) 
REnOVE-LOAD(OM) 
CLEAR BOLD FLAG 
END 

ELSE. SET HOLD FLAG 

END 
RETURN ' 

IF SU2 PUSHED 

STATE :»0 ( RESET > 

ABORT :«0 

CLEAR BOLD FLAG 

END 

ELSE. SET HOLD FLAG 

END 
RETURN 



In the foregoing specification, the invention has been 
described with reference to a specific exemplary embodiment 
thereof, it will, however, be evident that various modifications 
and changes may be made thereunto without parting from the broader 
spirit and scope of the invention as set forth in the appended 
claims. For example, as will be appreciated by those of ordinary 
skill in the art familiar with this specification, the apparatus 
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disclosed herein may be suiteUsle for use in connection with 
various types of gaseous treatment systems, such as those which 
employ toxic gases, e.g^, without limitation, bleaching gases, 
fumigants, sterilants, etc. The specification and drawings 
are, accordingly, to be regarded in am illustrative rather them 
a restrictive sense. 
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KEAT IS CLAIMED IS: 

1. Apparatus S'ox treating articles with a gas coa^jrisingi 
chamber means for receiving an article tp be 
treated; 

means for supplying the gas to the chamber means 
comprising valve means coupled to the chamber means for 
supplying the gas to the chamber means, means for 
removing the gas from the chamber means after a 
predetermined time interval, electronic control means 
receiving a plurality of electrical signals associated 
with ones of measured parameters from said chamber means 
for controlling said valve means and said means for 
removing, said electronic control means comprising 
computer means for cycling said apparatus through a 
plurality of states in accordance with a predetermined 
sequence of instructions, said computer means including 
means for aborting the operation of said appar^'tus to one 
of a plurality of defined failure states in response to a 
failure of said apparatus, said selected failure state 
dependent oh the state in said cycle in which the failure 
occurred. 

2. The apparatus recited in claim l wherein said gas is a 
sterilizing gas, whereby said article is sterilized by 
said gas. 

The apparatus recited in claim 2, wherein said 
sterilizing gas is generated from at least two component 
parts, and further including first means for receiving a 
first component part of the gas, second means for 
receiving a second component part of the gas, means for 
allowing said first and second component parts to react 
with each other to generate said sterilizing gas, said 
means for allowing being controlled by said computer 
means in response to the measurement of selected ones of 
said plurality of measured parameters. 



3. 
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4. The apparatus recited in claim 3, further comprising 
valve means £or supplying a relatively stable gas to said 
chamber means. 

5. The apparatus recited in claim 3, further comprising 
valve means for supplying filtered air to said chamber 
means. 

6. The apparatus recited in claim 3, further comprising 
valve means for supplying water vapor to said chamber 
means to affect the humidity level in said chamber* 

7. The apparatus recited in claim 3 wherein said plurality 
of measured parameters include the temperature r pressure 
and humidity in said chamber means and the concentration 
of said sterilizing gas in said chamber means. 

• • • * 

8. The apparatus recited ih claim 2 wherein said sterilizing 

gas comprises chlorine dioxide. 

9. The apparatus recited in claim 3 wherein said sterilizing 
gas comprises chlorine dioxide and said first component 
comprises chlorine gas and said second component 
comprises sodium chlorite. 

10. The apparatus recited in claim 2 wherein said means for 
removing comprises vacuum pump means and additional valve 
means . 

11. The apparatus recited in claim 2, wherein said valve 
means comprises first and second switch means, said first 
switch means indicating when said valve means is open and 
said second switch means indicating when said valve means 
is closed r said first and second switch means being in 
opposite states such that when said first switch means is 
closed, said second switch means is open. 
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12. The apparatus recited in claim 2, wherein said electronic 
control means comprises memory means r and further 
comprising means for receiving input signals from said 
valve means indicative of the closed or open condition of 
said valve means and means for transmitting output 
signals to said valve means to selectively open or close 
said valve means / image signals of said input and output 
signals being stored in said memory means. 

13. The apparatus recited in claim 12r further comprising 
means for disabling said output signals from being 
transmitted to said valve means except when an enabling 
signal is issued by said computer means. 

14. The apparatus recited in claim 2, further coni>rislng ^ 
means for monitoring for proper operation of said 
computer means r said monitoring means issuing a disabling 
signal to prevent actuation, of said valve means in the 
event of a failure of said conqputer means. 

15. The apparatus recited in claim 12r further comprising 
mask means stored in said memory means, said computer 
means comparing said image signals of said input and 
output signals and generating an alarm signal if said 
input and output image signals do not agree in response 
to the setting of a bit in said mask means. 

16. The apparatus recited in claim 11, further comprising 
means for monitoring the state of said first and second 
switch means r and further comprising means for generating 
an alarm signal if said first and second switch means are 
not in the proper states. 

17. The apparatus recited in claim 2, wherein said valve 
means moves between a first state and a second state in 
response to instructions from said computer means, and 
further comprising timer means for generating an alarm 
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signal if said valve means does not move from said first 
to second state in a predetermined time interval. 

18. The apparatus recited in claim 2, further coii5)rising 
means for cycling said apparatus to a further defined 
state once one of said defined failure states is reached. 

19. Apparatus for treating articles with a gas comprising: 

first means for receiving a first component; 

second means for receiving a second component r said 
first and second components, when reacted together, 
forming said gas; 

means for reacting said two components together for 
forming said gas; 

first valve means for supplying said gas to said 
chamber means to treat said article in said chamber 
means; 

» 

• '.means for removing said glas from said chamber means; 
electronic controller means for controlling said 
means for reacting, means for supplying and means for 
removing comprising computer means executing a 
predetermined sequence of steps so as to cycle said 
apparatus through a series of successive states defining 
a cycle in which said article is treated by said gas and 
wherein said gas is thereafter removed from said chamber 
means so as to render said chamber means within 
acceptable standards of safety. 

20. The apparatus recited in claim 19 wherein said gas is a 
sterilizing gas, whereby said article is sterilized by 
said gas. 

21. The apparatus recited in claim 20 wherein said computer 
means comprises means for receiving a plurality of 
electrical signals associated with ones of measured 
parameters from said chamber means for controlling the 
operation of said means for reacting, means for supplying 
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and means for removing* 

22. The apparatus recited in claim 21 r wherein said means for 
reacting comprises second valve means for allowing said 
first and second components to react with each other to 
generate said sterilizing gas, said second valve means 
being controlled by said computer means in response to 
the measurement of selected ones of said plurality of 
measured parameters. 

23. The apparatus recited in claim 22, further comprising 
valve means for supplying a relatively stable gas to said 
chamber means. 

24. The apparatus recited in claim 22, further comprising 
valve means for supplying filtered air to said chamber 
means . 

• ■ . 

25. The apparatus recited in claim 22, further comprising 
valve means for supplying water vapor to said chamber 
means to affect the humidity level in said chamber. 

26. The apparatus recited in claim 22 wherein said plurality 
of measured parameters include the temperature, pressure 
and humidity in said chamber means and the concentration 
of said sterilizing gas in said chamber means. 

27. The apparatus recited in claim 20 wherein said 
sterilizing gas comprises chlorine dioxide. 

28. The apparatus recited in claim 27 wherein said 
sterilizing gas comprises chlorine dioxide and said first 
component comprises chlorine gas and said second 
component comprises sodium chlorite. 

29. The apparatus recited in claim 20 wherein said means for 
removing comprises vacuum pun^ means and additional valve 
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means. 

30 « The apparatus recited in claim 20, wherein said valve 

means comprises first and second switch means, said first 
switch means indicating when said valve means is 'open and 
said second switch means indicating when said valve means 
is closed, said first and second switch means being in 
opposite states such that when said first switch means is 
closed, said second switch means is open. 

31. The apparatus recited in claim 20, wherein said 
electronic control means comprises memory means, and 
further comprising means for receiving input signals from 
said valve means indicative of the closed or open 
condition of said valve means and means for transmitting 
output signals to said valve means to selectively open or 
close said valve means, images of said input and output 
signals being stored in said memory means. 

32. The apparatus recited in claim 31, further comprising 
means for disabling said output signals from being 
transmitted to said valve means except when an enabling 
signal is issued by said computer means. 

33. The apparatus recited in claim 20, further comprising 
means for monitoring for proper operation of said 
computer means r said monitoring means issuing a disabling 
signal to prevent actuation of said valve means in the 
event of a failure of said computer means. 

34. The apparatus recited in claim 31, further comprising 
mask means stored in said memory means, said computer 
means comparing said images of said input and output 
signals and generating an alarm signal if said input and 
output images do not agree in response to the setting of 
a bit in said mask means. 
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35. The apparatus recited in claim 30 ^ further comprising 
means for monitoring the state of said first and second 
switch means/ and further comprising means for generating 
an alarm signal. if said first and second switch means are 
not in the proper states* 

36. The apparatus recited in claim 20, wherein said valve 
means moves between a first state and a second state in 
response to instructions from said computer means, and 
further comprising timer means for generating an alarm 
signal if said valve means does not move from said first 
to second state in a predetermined time interval. 

37. The apparatus recited in claim 20, wherein said computer 
means includes means for aborting the operation of said 
apparatus to one of a plurality of defined failure states 
in response to a failure of said apparatus, said selected 
failure state dependent on the state in said cycle in - 
which the failure occurred. 

38. The apparatus recited in claim 37, further comprising 
means for resetting said apparatus to a further defined 
state once one of said defined failure states is reached. 

39. Apparatus for treating articles with a gas comprising: 

chamber means for receiving articles to be treated; 

means for supplying the gas to the chamber means 
comprising valve means coupled to the chamber means for 
supplying the gas to the chamber means, means for 
removing the gas from the chamber means after a 
predetermined time inter valr electronic control means 
receiving a plurality of electrical signals associated 
with ones of measured parameters from said chamber means 
for controlling said valve means and said means. for 
removing, said electronic control means comprising 
computer means for cycling said apparatus through a 
plurality of states in accordance with a predetermined 
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seguence of instructions, 

said computer means including mefflory means, and 
further con^rislng means £or receiving input signals from 
said valve means indicative of the closed or open 
condition of said valve means and means for transmitting 
output signals to said valve means to selectively open or 
close said valve means , image signals of said input and 
output signals being stored in said memory means, 

mask means being stored in said memory means, said 
computer means comparing said image signals of said input 
and output signals and generating an alarm signal if said 
input and output image signals do not agree in response 
to the setting of a bit in said mask means. 

40. The apparatus recited in claim 39, wherein said gas is a 
sterilizing gas, whereby said article is sterilized by 
said gas. 

* * 

41. The apparatus recited in claim 40, wherein said 
sterilizing gas is generated from at least two component 
parts, and further including first means for receiving a 
first component part of the gas, second means for 
receiving a second component part of the gas, means for 
allowing said first and second component parts to react 
with each other to generate said sterilizing gas, said 
means for allowing being controlled by said computer 
means in response to the measurement of selected ones of 
said plurality of measured parameters. 

42. The apparatus recited in claim 41, further comprising 
valve means for supplying a relatively stable gas to said 
chcunber means. 

43. The apparatus recited in claim 41, further comprising 
valve means for supplying filtered air to said chamber 
means . 
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44. The apparatus recited in claim 41, further comprising 
valve means for supplying water vapor to said chamber 
means to affect the humidity level in said chamber. 

45. The apparatus recited in claim 41, wherein said plurality 
of measured parameters include the temperature, pressure 
and humidity in said chamber means and the concentration 
of said sterilizing gas in said chamber means. 

46. The apparatus recited in claim 40 wherein said 
sterilizing gas comprises chlorine dioxide. 

47. The apparatus recited in claim 41 wherein said 
sterilizing gas coir5>rises chlorine dioxide and said first 
component comprises chlorine gas and said second 
coa^jonent comprises sodium chlorite. 

48. The apparatus recited in claim 40 wherein said means for 
removing comprises vacuum pump means and additional valve 
means . 

19, The apparatus recited in claim 40, wherein said valve 

means comprises first and second switch means, said first 
switch means indicating when said valve means is open and 
said second switch means indicating when said valve means 
is closed, said first and second switch means being in 
opposite states such that when said first switch means is 
closed, said second switch means is open. 

0. The apparatus recited in claim 40, further comprising 
means for disabling said output signals from being 
transmitted to said valve means except when an enabling 
signal is issued by said computer means. 

L. The apparatus recited in claim 40, further comprising 
means for monitoring for proper operation of said 
computer means, said monitoring means issuing a. disabling 
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signal to prevent actuation o£ said valve means in the 
event of a failure of said computer means* - 

52. The apparatus recited in claim 49, further comprising 
means for monitoring the state of said first and second 
switch means r and further comprising means for generating 
an alarm signal if said first and second switch means are 
not in the proper states* 

53. The apparatus recited in claim 40, wherein said. valve 
means moves between a first state and a second state in 
response to instructions from said computer means, and 
further comprising timer means for generating an alarm 
signal if said valve means does not move from said first 
to second state in a predetermined tiime interval* 

54. The apparatus recited in claim 40, wherein said computer 
means further comprises means for aborting the operation 
of said apparatus to one of a plurality' of defined 
failure states in response to a failure of said 
apparatus, said selected failure state dependent on the 
state in said cycle in which the failure occurred* 



55, 



The apparatus recited in claim 39, further comprising 
means. for cycling said apparatus to a further defined 
state once one of said defined failure states is reached 
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